This excerpt from Chapter 5 of File System Forensic Analysis is posted with permission from Addison-Wesley Professional. The last chapter provided an overview of volume analysis and why it’s important ...

Last week I looked at some creative uses of log analysis for detecting malware, and ways to acquire Windows physical memory for analysis. What I've seen time and time again is where those in charge of ...

Windows File Analyzer will help you decode & analyze the Thumbnail Database, Prefetch folder, Shortcuts, Index.DAT, and Recycle Bin for forensic analysis. We took it for a spin and can say that it is ...

Every security team should have these types of digital forensics tools available. Many are free, and there are enough options to find one that suits your skills and approach. A solid toolset is at the ...

BlackLight, for those not already familiar with it, quickly analyzes computer volumes and mobile devices. It sheds light on user actions and now even includes analysis of memory images. BlackLight ...