If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS As an update to a post by Mari, there’s been a bit of talk about a newly located registry subkey that indicates the actual install date […]

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS Jonas Plum has started to reverse engineer the new Apple File System (APFS) and shares his research. APFS filesystem format  The guys at Cyber Forensicator shared […]

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS The Blackbag Training Team show how Blacklight can be used to examine the Windows Registry Windows Registry Demystified – Part Two Joanna Shemesh at Cellebrite explains […]

If you’d like to vote this site for the Forensic 4cast blog of the year, that would be greatly appreciated 🙂 2017 Forensic 4:cast Awards – Voting FORENSIC ANALYSIS James Habben at 4n6ir has updated his CCM_RecentlyUsedApps record structure Enscript carver to support unicode characters. CCM_RecentlyUsedApps Update on Unicode Strings The Blackbag Training Team share […]

Nominations for the 2017 Forensic 4Cast Awards closed during the week, but Lee has tallied the nominations and voting is now open until May 31. Thank you to everyone who nominated this blog, as a result it was one of the top three, and therefore able to be voted for! If you’d like to vote […]