I have been examining numerous computers and media cards to support fraud investigations in the past year.  One group of thieves has been in...

In the past few weeks, I've had the opportunity to make forensic disk images of what one might call "non-standard" devices.  T...

I previously posted about parsing iPhone SMS database .  The particular focus was the recovery of deleted messages.  I explained there are r...

I recently examined a Macintosh computer where I needed to look at Internet History.  The only installed browser was Safari, and the history...

I was asked recently to help recover deleted messages from an iPhone SMS database.  Conveniently, this is called "sms.db" on the i...

TinyCore Linux is an ideal platform for building a light weight forensics distribution with the purposes I have in mind (See Part 1 of thi...

Last week I rediscovered TinyCore Linux.  I had taken a look at it about 6 months ago and was intrigued, but didn't have the time to exp...