Avoiding Atrophy Forensics

FTK Imager has been around for years but it wasn't until recently that AccessData released a break out version for use on the Command Li...

During the next few minutes I will explain the Windows Registry and why it's important to the us.  I'd like to start by saying that ...

The purpose of this post is to provide a basic (though incomplete) guide to preparing a Debian based machine to perform very basic forensic ...

This post relies on an understanding of information from a previous post that can be found  here .  The purpose of this post is to discuss f...

I got a new hard drive to replace the drive in my laptop's hard drive caddy today.  I wanted to copy the data from my existing drive exa...