Computer keyboard with red enter key being pressed

Introduction to NetAnalysis® v1.52 Digital Detective is pleased to announce the release of NetAnalysis® v1.52 (and HstEx v3.6).  The release of this version has been eagerly awaited, so we are glad to say the wait is finally over. NetAnalysis® v1.52 adds a number of new features and fixes some minor bugs.  Some of the major new features released […]

Digital Detective HstEx® featured image

Overview HstEx v3.6 adds a number of new features and fixes some minor bugs. One of the major new features released in this version is the ability to recover Safari binary plist data. New Feature: Apple Safari Binary Plist Recovery The Apple Safari browser stores Internet history records in an Apple Property List (plist). With […]

AOL logo on dark blue background

Introduction Not so long ago, one email client which increased in popularity (particularly amongst paedophiles) in the United Kingdom was that provided with America Online (AOL). Email extraction and analysis causes significant problems for digital forensic examiners. Almost all of the forensic software designed for extracting email is tailored for dealing with mail-store files which are intact.  This means that […]

Clock dial showing hands approching 12 o' clock

Introduction Some of you will have noticed that from NetAnalysis® v1.50 there have been numerous new date and time columns added. These new timestamps were identified during months of research and development and are now included with the latest release. The image below shows some of the new fields from Internet Explorer. This article will […]

Internet Explorer logo over a computer keyboard

Introduction The Internet Explorer disk cache is a storage folder for temporary Internet files that are written to the hard disk when a user views page from the Internet.Internet Explorer uses a persistent cache and therefore has to download all of the content of a page (such as graphics, sound files or video) before it […]

Introduction Microsoft Internet Explorer maintains a number of INDEX.DAT files to record visits to web sites as well as to maintain cache and cookie data.  In this article, we will look at the Daily and Weekly files. Daily INDEX.DAT Entries The Daily INDEX.DAT file maintains a Daily record of visited pages.  This INDEX.DAT file has an unusual HOST record […]

View of earth showing text 'Manual Timezone Identification'

Introduction to Time Zone Identification In a digital forensic examination, establishing which Time Zone the system had been set to should one of the first examination tasks.  If this information is not established at an early stage and taken into account, the validity of Date/Time evidence may be brought into question.  Not only is this […]

Hard disk showing read/write heads

Introduction A useful feature of Blade® is the ability to exchange Data Recovery Profiles with colleagues and other digital forensic practitioners. The processing of Exporting and Importing profiles is relatively simple. Global Recovery Profile Database Blade® has access to two separate data recovery profile databases. The global database cannot be altered by the user and […]

Email client showing inbox, compose and starring lniks

Introduction The use of electronic mail (email) as a mode of communications for both formal and informal purposes has increased considerably over the past decade. As such, the opportunities for the criminal element of society to make use of this facility have also widened making it commonplace within a digital forensics examination to review email […]

Keyboard with chain and palock

Internet Explorer introduced a number of new security and privacy features in version 8.  One of these new features was InPrivate Filtering.  InPrivate Filtering helps prevent the web sites a user visits from automatically sending details about the visit to other content providers. When a user visits a web site, it automatically shares standard computer […]