Clock dial showing hands approching 12 o' clock

Introduction Some of you will have noticed that from NetAnalysis® v1.50 there have been numerous new date and time columns added. These new timestamps were identified during months of research and development and are now included with the latest release. The image below shows some of the new fields from Internet Explorer. This article will […]

Internet Explorer logo over a computer keyboard

Introduction The Internet Explorer disk cache is a storage folder for temporary Internet files that are written to the hard disk when a user views page from the Internet.Internet Explorer uses a persistent cache and therefore has to download all of the content of a page (such as graphics, sound files or video) before it […]

Introduction Microsoft Internet Explorer maintains a number of INDEX.DAT files to record visits to web sites as well as to maintain cache and cookie data.  In this article, we will look at the Daily and Weekly files. Daily INDEX.DAT Entries The Daily INDEX.DAT file maintains a Daily record of visited pages.  This INDEX.DAT file has an unusual HOST record […]

View of earth showing text 'Manual Timezone Identification'

Introduction to Time Zone Identification In a digital forensic examination, establishing which Time Zone the system had been set to should one of the first examination tasks.  If this information is not established at an early stage and taken into account, the validity of Date/Time evidence may be brought into question.  Not only is this […]

Hard disk showing read/write heads

Introduction A useful feature of Blade® is the ability to exchange Data Recovery Profiles with colleagues and other digital forensic practitioners. The processing of Exporting and Importing profiles is relatively simple. Global Recovery Profile Database Blade® has access to two separate data recovery profile databases. The global database cannot be altered by the user and […]

Email client showing inbox, compose and starring lniks

Introduction The use of electronic mail (email) as a mode of communications for both formal and informal purposes has increased considerably over the past decade. As such, the opportunities for the criminal element of society to make use of this facility have also widened making it commonplace within a digital forensics examination to review email […]

Keyboard with chain and palock

Internet Explorer introduced a number of new security and privacy features in version 8.  One of these new features was InPrivate Filtering.  InPrivate Filtering helps prevent the web sites a user visits from automatically sending details about the visit to other content providers. When a user visits a web site, it automatically shares standard computer […]

Random binary data with magnifying glass showing the text REDIRECT in red

Introduction Redirects provide a way to transport the browser from one point on a web site to another.  Redirects are most commonly used to translate references to outdated web pages to new, updated ones.  They can be instigated either by the browser, in which case they are referred to as client-side redirect, or by the […]

Folded newspaper on top of computer keyboard

Kent, UK – December 2009 Digital Detective Group Ltd., a provider of leading digital forensic software, announced today the release of Blade®, a software product designed to help police and law enforcement tackle their ever increasing digital forensic caseload and the rising tide of Internet child abuse. Blade® is a Windows-based, advanced forensic data recovery […]

Digital Detective DCode Featured

This utility was designed to calculate date/time values from the various timestamps that may be found inside data files. During a forensic examination, you may need to decode a date or verify the date provided to you by forensic software. This is where decode comes in. Decode can take an integer or hex value and […]