Search
7 results for “jlindema”
-
I've been waiting decades for analysis like this. Looks amazing and very empowering. Reminds me of #foodmarble
Have any of my followers used this❓
Let me know in the comments!
-
I've been waiting decades for analysis like this. Looks amazing and very empowering. Reminds me of #foodmarble
Have any of my followers used this❓
Let me know in the comments!
-
For those of you interested in learning how to use X-Ways Forensics, there are still a few seats left in the March 06-09 training course taking place in the Washington, DC/Baltimore area:
-
Resoundingly, the poll showed that most don't use X-Ways Forensics for anything other than analyzing traditional, computer-based storage devices.
So, WHY don't you use it for data from other sources (e.g., mobile phone extractions, chip dumps, etc.)?
-
#DFIR SQLite Query Tip: try using the "IFNULL" function in your queries to clearly identify truly empty (blank) values in a source database - for example, you could output "[NULL]".
Doing this can help avoid confusion about why a value is blank in a query's output.
-
#DFIR SQLite Query Tip: when converting/interpreting values (e.g. "0" = "False" or "No"), I recommend including the original values in the output.
This not only shows transparency in your work; but is helpful when verifying converted/interpreted values when you don't have access to the query.
For example, you could output both the original and converted/interpreted fields/values so they are adjacent, or include both values in the same cell (e.g. "0 [No]", or use the "||" concatenation operator).
-
X-Ways Forensics 20.7 SR-0 was just released.
https://www.x-ways.net/winhex/forum/messages/1/5390.html?1668539143
I'm excited to see that the "functionality of Excire Forensics is now included..."!