AlessandroZ has shared the piece of software called ‘LaZagne’. LaZagne uses an internal Windows API called CryptUnprotectData to decrypt user passwords. It is fantastic work!

WhatsApp has become one of the most important areas in the field of mobile forensics. Unfortunately, studies with smartphones are not so easy. Researchers may face various difficulties during the process.

DFIR.Science has shared new video ‘FTK Imager Command Line Physical Disk Hashing’. It tells us how to use FTK Imager command line for creating the hash of the hard disk.

The application is specifically designed to present forensic data forensic data. It is designed to collect the Mandiant Redline collection file and provide search / stack flexibility and tags. Many of the searches are structured, unstructured, geo, metric – any way you want.