iOS 11 Isn’ t All Fun and Games
SANS instructors Heather Mahalik and Domenica “Lee” Crognale discuss iOS 11 messages and the differences they ha…
How to Remove the Backup Password in iOS 11
Cindy Murphy from Gillware has published a very interesting post on how to reset the backup password in iOS 11. Here is an e…
LNK Files and Jump Lists
Richard Davis continues his “Introduction to Windows Forensics” series. This video introduces the ubiquitous LNK…
The Hitchhiker’s Guide to macOS USB Forensics
We are not sure about your labs, but our receives more and more Macs for forensic examination every month. And, of course, s…
Chasing Adversaries with Autoruns â Evading Techniques and Countermeasures
Sysinternals Autoruns is a great utility for defenders to discover and disable malware and adversaries’ persistence po…
Forensic Artefacts Associated with Intentionally Deleted User Accounts
Digital forensics is an evolving discipline that looks for evidence in electronic devices. It is being utilised in investiga…
FindUSBMSC has been updated
EasyMetaData has updated FindUSBMSC. It’s a script to parse the system logs on macOS. It looks for USBMSC storage devi…
Snapchat Analysis to Discover Digital Forensic Artifacts on Android Smartphone
Smartphones play an important role in our lives. With the advent of applications for smartphones, the more functionalities a…
EXT File System Recovery
The standard Linux fsck utility does a good job recovering damaged file systems. But can a deeper understanding of EXT file …
Extract Common Windows Forensic Artifacts with ArtifactExtractor
ArtifactExtractor is a script that extracts common Windows artifacts from source images and VSCs. Artifacts in VSCs will be …
