Digital Forensics Stream
Findings, tips, and tools developed while trekking through the world of digital forensics

Tools

Name Description
$I Parse Parse Windows $I files from the Recycle Bin. Read about it here.
evtx-usb Extract USB device connection and disconnect events from DriverFrameworks-UserMode/Operational event log in Windows 7. Read about it here.
acdCacheParse Parse browser cache files for records related to Amazon Cloud drive. Read about it here.
acdLogParse Parse Amazon Cloud Drive log file. Read about it here.
usbmsc.pl Extract records of USB devices connected to OS X system from kernel.log. Read about it here.
VSC Toolset Toolset for working with volume shadow copies. Read about it here.

Twitter

Subscribe via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Archives

DISCLAIMER

The contents of this blog reflect my opinion and may not represent the views of my employer or anyone else.  Any material on this blog, especially related to technology and/or forensic methodology should not be assumed to be true in all possible scenarios.  As always, test any theories, ideas, or tools from this blog in your own environment before stating them or the results therefrom as factual.