Introduction We have been asked a few times recently about our new USB dongle licence option. The USB dongle licence is a small hardware device that plugs into a USB port on a host computer to provide licence information to our software. Software licences stored on USB hardware offer a more flexible licence solution than […]
Introduction to Blade® v1.8 This release of Blade has a number of new features and improvements. We have added 8 new Data Recovery Profiles to the Global Recovery Database, as well as releasing some new Professional Modules. We have released a new 3GP/MPEG-4/ISO Base Media Format Intelli-Carve® Recovery Profile for the recovery of MP4/3GP video files. […]
Introduction to NetAnalysis® v1.52 Digital Detective is pleased to announce the release of NetAnalysis® v1.52 (and HstEx v3.6). The release of this version has been eagerly awaited, so we are glad to say the wait is finally over. NetAnalysis® v1.52 adds a number of new features and fixes some minor bugs. Some of the major new features released […]
Overview HstEx v3.6 adds a number of new features and fixes some minor bugs. One of the major new features released in this version is the ability to recover Safari binary plist data. New Feature: Apple Safari Binary Plist Recovery The Apple Safari browser stores Internet history records in an Apple Property List (plist). With […]
Introduction Not so long ago, one email client which increased in popularity (particularly amongst paedophiles) in the United Kingdom was that provided with America Online (AOL). Email extraction and analysis causes significant problems for digital forensic examiners. Almost all of the forensic software designed for extracting email is tailored for dealing with mail-store files which are intact. This means that […]
Introduction Some of you will have noticed that from NetAnalysis® v1.50 there have been numerous new date and time columns added. These new timestamps were identified during months of research and development and are now included with the latest release. The image below shows some of the new fields from Internet Explorer. This article will […]
Introduction The Internet Explorer disk cache is a storage folder for temporary Internet files that are written to the hard disk when a user views page from the Internet.Internet Explorer uses a persistent cache and therefore has to download all of the content of a page (such as graphics, sound files or video) before it […]
Introduction Microsoft Internet Explorer maintains a number of INDEX.DAT files to record visits to web sites as well as to maintain cache and cookie data. In this article, we will look at the Daily and Weekly files. Daily INDEX.DAT Entries The Daily INDEX.DAT file maintains a Daily record of visited pages. This INDEX.DAT file has an unusual HOST record […]
Introduction to Time Zone Identification In a digital forensic examination, establishing which Time Zone the system had been set to should one of the first examination tasks. If this information is not established at an early stage and taken into account, the validity of Date/Time evidence may be brought into question. Not only is this […]
Introduction A useful feature of Blade® is the ability to exchange Data Recovery Profiles with colleagues and other digital forensic practitioners. The processing of Exporting and Importing profiles is relatively simple. Global Recovery Profile Database Blade® has access to two separate data recovery profile databases. The global database cannot be altered by the user and […]