Friday, May 3, 2013

I have fully moved over to my new Domain.

See you all there!


Friday, March 29, 2013

New updates

For a more in depth update, visit my new location at

A list of what has come out recently.

BlackBag - BlackLight 2013 R1

Cellebrite - Application v1.8.6.0

Logicube - Dossier v3.3.3RC16

Guidance Software - EnCase v7.06.01

Access Data - FTK 4.2.1
Access Data - PRTK/DNA 7.1.0

Magnet Forensics - Internet Evidence Finder 6.0

Tableau - Tableau Updater v7.02


Friday, March 15, 2013

F-Response has a new version

F-Response has a new version.  4.0.6
There are some pretty big changes.
  • New connectors for all customers with Tactical and above
  • F-Response Database Object Connector - Maps remote databases with embedded file objects to the local examiner's machine where they appear as a local read-only share.
  • F-Response Email connector - provides direct, read-only access to remote GMail, Yahoo! Mail, and IMAP based email data.  F-Response will show it as a read-only, locally attached share.
I can't stress this enough, F-Response is a must for anyone doing acquisitions.  The extra capabilities it adds are immense.
To read more about this release visit

Thank you

I would like to thank everyone for visiting!

I have gotten a bit fed up with blogspot over the past few months and have decided to buy a domain for the blog.

For the next month (through April) I will still be posting here, however I now own

Both sites will get the updates and I will fully transition by April 30th.

I hope to see you there!

Friday, March 1, 2013

Guidance Software has a new update.

EnCase 7.06 is available

It appears that this update is focused heavily on the Mac side of things and a new Network previewer.
I have a Mac that I am currently examining, so I look forward to trying this out.

Updates include:

  • Direct Network Preview
    • Awesome!
    • This allows you to conduct a live examination over a network without the need of a SAFE.
    • It allows you to deploy a servlet to a single computer on the network in order to read, acquire, or monitor a hard drive or computer.
    • I will be testing this out ASAP.
  • Forensic Imager (Pretty much the functionality of Acquisition)
    • No dongle needed and it is free of charge.
  • Macintosh Enhancements
    • Displays all HFS+ file system compressed files as uncompressed
    • Supports Directories' hard links (used in conjunction with Apple Time Machine)
    • Supports OS X 10.8
    • Others
  • Others
To read more visit

Fore sales and training visit the Guidance Software training partner of the year World-Wide for both 2011 and 2012


Micro Systemation has a new release

XRY v6.5 has been released.

This new version includes:

  • Improved Android 4.0 Physical support
  • MTK Chipset NAND decoding
  • Numerous new models supported
  • Others
To read more visit


Friday, February 22, 2013

Passware has a new release

Passware Kit Forensic 12.3 has been released.

New features include:

  • Extraction of Facebook, Google, and other passwords from live memory and hibernation files
  • Distributed password recovery using custom dictionaries
  • Hardware acceleration using ATI cards
  • Others
To read more about this release visit

For sales and training visit