Archives

Archive of previous posts

April 2010 (1)
- 06: If Apple did computer forensics… (1)
February 2010 (1)
- 22: Outlook PST (Personal Folder) File Format Now Available From Microsoft (0)
December 2009 (1)
- 01: Site Updates (1)
October 2009 (1)
- 26: Microsoft to Release the .PST File Format (2)
September 2009 (2)
- 25: Computer Forensic Exam of Najibullah Zazi’s Laptop (1)
- 10: The Meaning of LEAK Records (4)
February 2009 (1)
- 25: The Single Piece of Evidence (SPoE) Myth (2)
April 2008 (1)
- 25: Sometimes the answers are enough, sometimes they’re not (1)
July 2007 (1)
- 30: The admissibility vs. weight of digital evidence (1)
May 2007 (5)
- 24: CitySec meetup in Los Angeles (1)
- 24: Recovering a FAT filesystem directory entry in five phases (3)
- 08: The five phases of recovering digital evidence (2)
- 05: How forensic tools recover digital evidence (data structures) (6)
- 02: Evaluating Forensic Tools: Beyond the GUI vs Text Flame War (2)
March 2007 (4)
- 21: Copying 1s and 0s (0)
- 04: Exhibits from deposition of RIAA’s expert available online (0)
- 01: Transcript of deposition of RIAA’s expert available online (0)
- 01: Planting evidence (3)
January 2007 (4)
- 26: Caught in the act… (0)
- 25: How digital forensics relates to computing (4)
- 11: The basics of how programs are compiled and executed (3)
- 10: Digital forensics in a comic (1)
December 2006 (4)
- 29: Self replicating software – Part 4 – The difference between worms and viruses (1)
- 24: Two tools to help debug shellcode (0)
- 16: Site move (0)
- 03: The basics of how digital forensics tools work (1)
November 2006 (2)
- 12: Digital Forensics Documentation (0)
- 08: What CSI does right (0)
October 2006 (1)
- 18: Deductive and Inductive reasoning (0)
September 2006 (2)
- 27: Information Context (a.k.a Code/Data Duality) (2)
- 25: Silence… (0)
August 2006 (2)
- 22: “Forensically Sound Duplicate” (Update) (0)
- 02: “Forensically Sound Duplicate” (0)
July 2006 (4)
June 2006 (4)
- 26: Base+Offset notation (or why we start counting with zero) (0)
- 24: Argument for MD5 (0)
- 21: The switch to Levenger (0)
- 18: About this blog (0)

Leave a Comment