OSDFCon Survey

Brian Carrier — Mon, 13 May 2013 16:33:55 GMT

We had more submissions to OSDFCon (http://www.osdfcon.org) this year than we have speaking slots. To make this a community effort, we're collecting feedback

Open Source Forensics CFP Reminder

Brian Carrier — Fri, 26 Apr 2013 17:33:10 GMT

Reminder that submissions are due May 1. As always, we're interested in presentations on new tools, old tools, user experiences, complaints about tools, etc.

Re: Linux tools for ARM

Greg Freemyer — Mon, 15 Apr 2013 20:02:49 GMT

I've experimented with BackTrack 5, but I don't recall it having forensic tools? ie. imagers, log2timeline, registry parsers, etc. Is there a list of tools on

Re: Linux tools for ARM

Fornzix — Mon, 15 Apr 2013 19:09:43 GMT

Kali Linux, the successor to BackTrack 5, also has support for ARM and includes forensic and security tools. Here's a link in case you're interested:

Linux tools for ARM

Greg Freemyer — Mon, 15 Apr 2013 17:15:43 GMT

All, I guess we all know ARM cpu's are becoming a major factor and drive smartphones, pads, etc. You may not realize that motherboards and soon even servers

Re: best carver to pull an apple mail out of an image?

Simson Garfinkel — Fri, 12 Apr 2013 18:36:41 GMT

The BEViewer https://github.com/simsong/bulk_extractor/wiki/BEViewer ... [Non-text portions of this message have been removed]

Re: best carver to pull an apple mail out of an image?

Greg Freemyer — Fri, 12 Apr 2013 17:07:14 GMT

Okay, Dumb question time. What interface? I only know about the CLI command. Greg ... [Non-text portions of this message have been removed]

Re: best carver to pull an apple mail out of an image?

Simson Garfinkel — Fri, 12 Apr 2013 12:57:44 GMT

Greg, I'm glad that you were able to do well with bulk_extractor. You might want to look at the User Interface. it would allow you to search for the email

Re: best carver to pull an apple mail out of an image?

Greg Freemyer — Fri, 12 Apr 2013 01:44:44 GMT

All, In my case, bulk_extractor found about 90,000 rfc822 related fragments (or full emails). I then did a simple grep through those to find the specific

best carver to pull an apple mail out of an image?

Greg Freemyer — Thu, 11 Apr 2013 04:30:04 GMT

I've got a case where I need to find one specific email. It was sent via Apple Mail on a Mac about 6 months ago. It was deleted a couple months later. I'm

Open Source Forensics Conference CFP

Brian Carrier — Mon, 08 Apr 2013 13:54:41 GMT

The 4th Annual Open Source Digital Forensics Conference will be held on November 5, 2013 in Chantilly, VA. You are invited to submit a presentation or

frag_find 1.0.0

Simson Garfinkel — Sat, 06 Apr 2013 18:09:39 GMT

All, frag_find is a hash-based carving tool. The current version didn't compile under current versions of Linux and was tied up in the NPS Bloom Filter

Re: Thanks to OSS forensic tool writers -- & CAINE & DEFT, too

Sandro Rossetti — Mon, 01 Apr 2013 17:35:21 GMT

... Ciao people... as far as I know The Italian Police Uses both Deft&Caine BUT No LEA never gave a single cent for its dev or distribution. What done so far

Re: Thanks to OSS forensic tool writers -- & CAINE & DEFT, too

Paul D. Bain — Sun, 31 Mar 2013 17:53:17 GMT

... Please, let us not forget the fine, Italian police who create and distribute CAINE Ubuntu. These folks recently released a new version of CAINE:

A big thank you to the linux oss forensic tool writers

Greg Freemyer — Sun, 31 Mar 2013 13:31:54 GMT

I would like to extend my appreciation to the writers of linux opensource software for digital forensics: In the last year the main names I can think of are

linux_forensics at Yahoo! Groups

OSDFCon Survey

Open Source Forensics CFP Reminder

Re: Linux tools for ARM

Re: Linux tools for ARM

Linux tools for ARM

Re: best carver to pull an apple mail out of an image?

Re: best carver to pull an apple mail out of an image?

Re: best carver to pull an apple mail out of an image?

Re: best carver to pull an apple mail out of an image?

best carver to pull an apple mail out of an image?

Open Source Forensics Conference CFP

frag_find 1.0.0

Re: Thanks to OSS forensic tool writers -- & CAINE & DEFT, too

Re: Thanks to OSS forensic tool writers -- & CAINE & DEFT, too

A big thank you to the linux oss forensic tool writers