No, the title of this post is not in error.  I don't mean "sleepwalking."  I meant what I said: sleepwaking . Those who know...

Garmin GPS devices track their position by default ( caveat : at least every device I have been given to examine!).  They will do so, approx...

A new version of  The Sleuth Kit  (TSK), a command line forensics tool set for both Linux and Windows, was released a few days ago.  This re...

A Picture can be Worth a Thousand Words Sometimes there is no substitute for booting a computer to gather data.  But the forensic conseque...

There are two ways to skin this cat... but one is much better! A colleague was looking for help parsing a Android mms/sms database (mmssms...

A brief history... In the summer of 2009, I created a forensic boot disc primarily intended for preview examinations of digital media call...

The MS Windows recycle bin differs in Vista from XP. In XP, an deleted file is moved to the "\Recycler\$SID\ folder where "$SID...