Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Forensic Downloads
· Forensics Feedback
· Forums
· Recommend Us
· Statistics
· Surveys
· Top 10
· Topics
· Training Reviews
· Web Links
· Your Account

Our Membership

Latest: captin
New Today: 1
New Yesterday: 1
Overall: 26161

Computer Forensics
This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.

Recent Posts

 computer forensics or information security
 LinkedIn Forensic Toolset - Beta Testers
 duplicators which can image without removing hard drive
 SMART for Linux - copy mount point
 Stegnography

Computer Forensics World Forums


Pages Served
We received
28689961
page views since August 2004

Security Sources

Firewalls
Cryptography
ISO 17799 ISO 27001
ISO 17799 Toolkit
ISO 27001 & 27000
Disk Analysis
Security Policies

Computer Forensics World: Forums

Computer Forensics World :: View topic - Recover data from 1 month ago under these circumstances?
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Recover data from 1 month ago under these circumstances?

 
Post new topic   Reply to topic    Computer Forensics World Forum Index -> General Computer Forensic Issues
View previous topic :: View next topic  
Author Message
baynamsteven
Newbie
Newbie


Joined: Jun 20, 2012
Posts: 5

PostPosted: Thu Jun 21, 2012 4:46 am    Post subject: Recover data from 1 month ago under these circumstances? Reply with quote

ll

Last edited by baynamsteven on Sat Jun 23, 2012 1:32 am; edited 1 time in total
Back to top
View user's profile
johndoe69
Newbie
Newbie


Joined: Jun 20, 2012
Posts: 5

PostPosted: Thu Jun 21, 2012 5:25 am    Post subject: Reply with quote

Pretty good with the right tools providing the files haven't been overwritten.

Try FTK or encase if you have access to it.
Back to top
View user's profile
baynamsteven
Newbie
Newbie


Joined: Jun 20, 2012
Posts: 5

PostPosted: Thu Jun 21, 2012 7:32 am    Post subject: Reply with quote

I have Encase, but not having any luck. Any advice?
Back to top
View user's profile
johndoe69
Newbie
Newbie


Joined: Jun 20, 2012
Posts: 5

PostPosted: Thu Jun 21, 2012 4:29 pm    Post subject: Reply with quote

Pretty good with the right tools providing the files haven't been overwritten.

Try FTK or encase if you have access to it.
Back to top
View user's profile
baynamsteven
Newbie
Newbie


Joined: Jun 20, 2012
Posts: 5

PostPosted: Thu Jun 21, 2012 9:54 pm    Post subject: Reply with quote

ll

Last edited by baynamsteven on Sat Jun 23, 2012 1:33 am; edited 1 time in total
Back to top
View user's profile
PreferredUser
Newbie
Newbie


Joined: Jan 01, 2007
Posts: 927
Location: USA

PostPosted: Fri Jun 22, 2012 2:09 am    Post subject: Reply with quote

The fragments will stand up, but as you alluded, you have to put the user at the keyboard. If all you have is the fragments, that will be an uphill fight.

Anything in the fragments that leads you to probable cause where you can subpoena other records from a service provider?
Back to top
View user's profile
baynamsteven
Newbie
Newbie


Joined: Jun 20, 2012
Posts: 5

PostPosted: Fri Jun 22, 2012 2:30 am    Post subject: Reply with quote

ll.

Last edited by baynamsteven on Sat Jun 23, 2012 1:33 am; edited 1 time in total
Back to top
View user's profile
PreferredUser
Newbie
Newbie


Joined: Jan 01, 2007
Posts: 927
Location: USA

PostPosted: Fri Jun 22, 2012 5:04 am    Post subject: Reply with quote

What tool(s) are you using to carve out web history?
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    Computer Forensics World Forum Index -> General Computer Forensic Issues All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.10 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops © 2003 http://www.nukecops.com

Forums ©

 

TMs property of their respective owner. Comments property of posters. © 2007 Computer Forensics Science World.
Digital forensic computing news syndication: Computer Forensics Training News or UM Text
Software is copyrighted phpnuke.org (c)2003, and is free under licence agreement. All Rights Are Reserved.