Profile cover photo
Profile photo
Meridian Discovery
10 followers -
Computer Forensics & e-Discovery Done Expertly.
Computer Forensics & e-Discovery Done Expertly.

10 followers
About
Posts

Post has attachment
Forensic Analysis of Email Attachment Timestamps in Outlook https://goo.gl/17yo9d #Dfir #Ediscovery #DigitalForensics
Photo
Add a comment...

Post has attachment
"According to the PDF 1.7 specification, the document information dictionary contains the following..." https://goo.gl/5pBwDu #Dfir #Ediscovery
Photo
Add a comment...

Post has attachment
"When the end user accesses her e-mails over the web interface, the back-end data structures are queried..." https://goo.gl/64iiY9 #Dfir #Ediscovery
Photo
Add a comment...

Post has attachment
"Full resolution timestamps can be obtained in numerous ways such as by reviewing the underlying raw..." https://goo.gl/zFDhlJ #DFIR
Photo
Add a comment...

Post has attachment
Does plucking the file from the filesystem and attaching it to an email result in total loss of filesystem metadata? https://goo.gl/17yo9d
Photo
Add a comment...

Post has attachment
"XMP allows metadata to be embedded into electronic documents, and enables software and systems to..." https://goo.gl/5pBwDu #Dfir
Photo
Add a comment...

Post has attachment
"For instance, a reviewer lacking the requisite experience can miss hidden content and comments in a..." https://goo.gl/64iiY9 #Dfir
Photo
Add a comment...

Post has attachment
"On a related note, even most mainstream computer forensics software do not display timestamps beyond..." https://goo.gl/zFDhlJ #DFIR
Photo
Add a comment...

Post has attachment
"The metadata load file would contain, among other things, the cryptographic hash of the original file as..." https://goo.gl/64iiY9 #Dfir
Photo
Add a comment...

Post has attachment
"Consequently, when files from a flash drive formatted with the FAT file system are copied to an NTFS..." https://goo.gl/zFDhlJ #DFIR
Photo
Add a comment...
Wait while more posts are being loaded