| View previous topic :: View next topic |
| Author |
Message |
baynamsteven Newbie


Joined: Jun 20, 2012 Posts: 5
|
Posted: Thu Jun 21, 2012 4:46 am Post subject: Recover data from 1 month ago under these circumstances? |
|
|
ll
Last edited by baynamsteven on Sat Jun 23, 2012 1:32 am; edited 1 time in total |
|
| Back to top |
|
 |
johndoe69 Newbie


Joined: Jun 20, 2012 Posts: 5
|
Posted: Thu Jun 21, 2012 5:25 am Post subject: |
|
|
Pretty good with the right tools providing the files haven't been overwritten.
Try FTK or encase if you have access to it. |
|
| Back to top |
|
 |
baynamsteven Newbie


Joined: Jun 20, 2012 Posts: 5
|
Posted: Thu Jun 21, 2012 7:32 am Post subject: |
|
|
| I have Encase, but not having any luck. Any advice? |
|
| Back to top |
|
 |
johndoe69 Newbie


Joined: Jun 20, 2012 Posts: 5
|
Posted: Thu Jun 21, 2012 4:29 pm Post subject: |
|
|
Pretty good with the right tools providing the files haven't been overwritten.
Try FTK or encase if you have access to it. |
|
| Back to top |
|
 |
baynamsteven Newbie


Joined: Jun 20, 2012 Posts: 5
|
Posted: Thu Jun 21, 2012 9:54 pm Post subject: |
|
|
ll
Last edited by baynamsteven on Sat Jun 23, 2012 1:33 am; edited 1 time in total |
|
| Back to top |
|
 |
PreferredUser Newbie


Joined: Jan 01, 2007 Posts: 927 Location: USA
|
Posted: Fri Jun 22, 2012 2:09 am Post subject: |
|
|
The fragments will stand up, but as you alluded, you have to put the user at the keyboard. If all you have is the fragments, that will be an uphill fight.
Anything in the fragments that leads you to probable cause where you can subpoena other records from a service provider? |
|
| Back to top |
|
 |
baynamsteven Newbie


Joined: Jun 20, 2012 Posts: 5
|
Posted: Fri Jun 22, 2012 2:30 am Post subject: |
|
|
ll.
Last edited by baynamsteven on Sat Jun 23, 2012 1:33 am; edited 1 time in total |
|
| Back to top |
|
 |
PreferredUser Newbie


Joined: Jan 01, 2007 Posts: 927 Location: USA
|
Posted: Fri Jun 22, 2012 5:04 am Post subject: |
|
|
| What tool(s) are you using to carve out web history? |
|
| Back to top |
|
 |
|