Recent content by RobertR

  1. R

    Spouse Consent to Search

    Sounds to me like he has a reasonable expectation to privacy on that machine.... I would not do it on the consent of a spouse that does not have access to the machine
  2. R

    Help! How do you nullify the effects of Go.DriveClean

    Excellent point Warlockz... The caveat being...if it is in a home lan or something similar doing NAT you will only have the information of every computer on that lan and where it went..... for example, I have several computer in my home for the rest of the family..... The ISP logs would show...
  3. R

    Protecting your forensic workstation from viruses

    make an image of your pristine forensic workstation....... you should only have you virus set to notify you of potential viruses..... Many hacker type tools will be flagged as viruses by anti virus programs... these may be evidentiary... you can research the reported programs and their effects...
  4. R

    Linen: Physical vs. logical disk

    you could also have privacy issues or restriction on your search authority..... you may not be allowed to seize other areas of the disk
  5. R

    Affidavit and Search Warrant

    sorry for the late reply....... basically you need to establish the constitutional requirements for the search warrant to be issued..... you need to describe the crime being investigated... establish the probable cause (why you believe that the evidence being sought will be where ever you...
  6. R

    Credit Crisis & Fraud

    The spike in demand has less to do with the economic situation and or increased crime in general, and more to do with the proliferation of digital devices....... In the old days a crime might have a piece of paper or communications related to it. Now days that paper or communication is...
  7. R

    help with ip lookup

    If she is concerned about contact with him why is she trying to track him...... If he is not contacting her no problem..... If he does then he has violated the protection order and the police can deal with it. If he has been arrested for violating the order and convicted then the court surely...
  8. R

    International Computer Forensics

    CF exist in all nations... the issues become the laws that exist in those nations..... I am of the thought that the Info Systems is a great way to leverage your knowledge...if you wish to get into the CF field look at certification in that area over a specialized Masters...... I see little...
  9. R

    Book Question

    While there may be good arguments for the A to Z approach.. The problem is that no two cases will be alike... so the A to Z approach may only address a small portion of the total population of potential cases. Technical is easy...... you can use the technical skills in any case situation... you...
  10. R

    What to wear?

    If you have a sleeve..... wear a long sleeve shirt anytime you may be dealing with the public.......and don't make it a white one that you can see through enough that people can get a hint of your sleeve.... make sure it totally conceals your ink. People are going to be looking at you and...
  11. R

    How to prove a HDD was being re-image before?

    the fact that all the time a date stamps show a big gap could be a clue..... for example... the made the original image 6 months to a year ago.... and the image that is on the machine now show a big gap in time and date stamps on files between that image time and current time.... or better yet...
  12. R

    Time stamps

    was it a vista machine..... I believe vista does not update MAC times unless the registry key telling it not to is changed.
  13. R

    log on/log off

    check the index.dat files for the urls... and look at temp Internet cache... might be some cached pages there
  14. R

    Master Degree Discussion

    Alot depends on where you are now...... if you are in an organization that governmental or quasi-governmental. The the aspects of the MBA and are really good for the ability to move up the later and be a better administrator of programs... be they CF related or otherwise..... I know in my MS...
  15. R

    Master Degree Discussion is my 2 cents... as a person with a MS that got it while working... Just judging by my recollection of you past post, I would say you have sufficient training and experience in this area. Most Masters Programs are for higher level personnel..... I would suggest an MBA with a...

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu