Posts Tagged ‘windows forensics’

The most popular Instant Messengers are Telegram, WhatsApp, Viber. These instant messengers have both mobile applications and desktop applications. Today we will look at the types of data an examiner can detect when researching desktop applications of Telegram, WhatsApp, Viber.

The next typical task of Cloud Forensics is the acquisition of a web based email account such as a Gmail account, an Yahoo account, a Hotmail account, etc. Of course, you can use Cloud Extractor (Oxygen) or Cloud Analyzer (Cellebrite). However, these tools are chargeable and not always available for an examiner. This article will tell you how to acquire a Gmail account with Thunderbird.

Nowadays, the basic exchange of information is carried out through Instant Messengers by using social networks. Some social networks have their own mobile apps which functionality can be compared with that of IM Messengers.

AXIOM is our one of the best tools. A few days ago Magnet Forensics has released AXIOM V2. Now AXIOM contains many features. We were especially delighted that the functional Volatility appeared in a new version of AXIOM. Volatility is the best tool for memory forensics. The combination of AXIOM and Volatility is clearly an excellent idea. And of course we immediately started testing this functionality.