Minoru Kobayashi has presented a tool for carving and recreating deleted VSS at at Japan Security Analyst Conference 2018. The script is already available for downloading at his GitHub.
-
Epochalypse: Utility to Convert Epoch Timestamps
Epochalypse utility by Pasquale Stirparo has been updated. Now it supports APFS timestamps… -
Forensic Analytics for Acquiring and Preserving Reliable Data from Cloud Hypervisors
Cloud computing is this decade’s major computing advancement. Many business enterpri… -
Using the Office 365 Activities API to Investigate Business Email Compromises
Business email compromises (BECs) are a big problem across a multitude of industries. Just…
Load More Related Articles
-
Epochalypse: Utility to Convert Epoch Timestamps
Epochalypse utility by Pasquale Stirparo has been updated. Now it supports APFS timestamps… -
Darwin-Collector – collect key files for macOS investigations
Darwin-Collector.sh is a script designed to be run against a mounted image, live system, o… -
Docker Explorer – a Tool to Help Forensicate Offline Docker Acquisitions
This project helps a forensics analyst explore offline Docker filesystems. Docker uses lay…
Load More In Software
