Windows 7 Registry Forensics: Part 2
Many forensic examiners are not familiar with the Registry or its forensic importance. One way to gain first-hand knowledge is to explore the Registry on a live, non-forensic computer.
Windows 7 Registry Forensics: Part 1
While the Windows Registry is forensically important, frequently it is not captured during the triage of a live system. Similarly, it is often overlooked during post-mortem examinations.
Book Review: The Software IP Detective’s Handbook
The primary focus of this book is software Intellectual Property, its authorship and ownership, and the not so commonly known field of Software Forensics.
SIM Forensics: Part 3
Analyzing a SIM card can provide the geographical location(s) where the SIM card, the phone, and the owner of the phone (suspect) may have been.
Sim Forensics: Part 2
Although a thorough discussion of all the potential evidence that could be on a SIM card is beyond the scope of this column, some of that information will be discussed in this and a future column.
SIM Forensics: Part 1
SIMs are found in GSM, iDEN, and Blackberry handsets. Under the GSM framework, a cell phone is termed a Mobile Station, consisting of a SIM card and a handset. From an investigative perspective, one useful feature of a SIM card is that it can be moved from one GSM compatible phone to another.
Understanding The World of Cellular Telephones: Part 3
Cell phones can and do store data or information that the user may not be aware of. It should come as no surprise that this can provide a tremendous amount of potential probative information (evidence) to investigators.
Understanding the World of Cellular Telephones: Part 2
Familiarity with the five main cell phone operating systems can aid your investigation.
Understanding the World of Cellular Telephones: Part 1
Telephone technology has evolved by leaps and bounds. It is important to understand some of the key terminology used when discussing cellular phones and other mobile devices.
Parameters For Selecting A Triage Tool
Triage tools vary greatly in their technical and operational performance capabilities.
