My dear friend. Have a nice year, full of work and good health. My best regards. As always, thanks for sharing knowledge and make this world a better place. :)
Hi I have watched some of your older videos, very informative and honest. Thanks for spilling the beans on all the con artists out there regarding recovering data and bogus software. It seem people just want to have our pants down and make money. Keep up the good work, We need more honest people in the world like you. Best Regards Kevin
found your video while looking for help with aa job interview prep for Digital forensics. I'm literally on my last semester of my masters in Cyber security digital forensics. I really want to be in this field of work.
Another good free tool that i think you missing. Arsenal Image Mounter from Arsenal Recon, There is an free version and an payed version there can boot E01 files and auto unlock the the login. Note, i do not work for Arsenal.
@@forensicguy yes it is an tool for mainly mounting images but it can alot more, like it mounts the images as "real scsi disk" so windows see them as real hardware and there for volume shadow copy works. i have the payed version and find the many function very very use full
oh yeah and the rcmp is your best friend because no matter what price you give them they will pay the full price , i know because i deal with the rcmp customers as well , they pay handsomely , there your best customers , i did find you right away .... Merry christmas and happy new year lol
Well, good information. Things have come a long way in the last 15 years since I got out of forensics. Although I am not certified like you, nor did I have all the gear you have, I did do a lot of data recovery for a few shops. Encase was nice back in the day. Are you open to the public to do some chip repairs? Or open to giving some advice on equipment for pulling data off of a damaged chip?
What are your thoughts on GIAC certs geared towards Digital Forensics? Such as GCFA or GCFE? Are they compatible to positions like yours in the field? Also you mentioned about running your own digital forensics company, how does that work legally? Is that more geared towards consulting for private and government companies?
@@forensicguy 2 years. However, in some cases I learned more from you than from some of the professors from the program. One of my classes this semester was about eDiscovery for the DFE. So I was wondering how much eDiscovery works a real DFE does?
ISFCE is going through restructuring at the moment, you might want to look into other certs for now until they are back on their feet. The CCE cert is still valid and I was just recertified this month, but I am not sure if they are taking on new members at the moment.
Hi . Thank you for the video. I’ve been in law enforcement for almost 20 years and am considering a move to digital forensics. A small company has offered me a job an a great deal of cellebrite training . I’m really interested but wonder if it’s too vendor specific. I’ve used XRY and been exposed to cellbrite reader but worry it my be too limited. Any thoughts appreciated.
I was given a live demo last year. It’s different than UFED. It’s more for live data acquisition especially for 3rd party apps. They have a screen recording feature that can automatically capture apps otherwise not supported by most forensic tools. It would be more useful for law enforcement in the field that just need a quick or very specific collection.
@@forensicguy I would agree that it seems more useful for someone on the field/scene. Usually in the lab you have more powerful tools or even just computer. Maybe useful in situations like in Ukraine where your lab is not usable due to it being in constant danger. Having a "mobile lab" seems the next best thing in that case. I also realized that these devices are 4+ years old. It also has a micro-USB port and I wonder how much of a hindrance that would be if compared to like a USB-C port. Ideally I'd like it to have two USB-C ports and a proper SSD (instead of SD-card).
Absolutely informative and straightforward to the main goals.
Amazing video, my dear friend.
By the way, my best wishes for his new coming year.
:)
Thank you! This is my 5 part video series from 2021 that I condensed into single 1 hour video.
Have a happy new year my friend!
omg tysm what an awesome video
My dear friend.
Have a nice year, full of work and good health.
My best regards.
As always, thanks for sharing knowledge and make this world a better place.
:)
Thank you!!
Thank you, This was very informative.
Hi I have watched some of your older videos, very informative and honest. Thanks for spilling the beans on all the con artists out there regarding recovering data and bogus software. It seem people just want to have our pants down and make money. Keep up the good work, We need more honest people in the world like you. Best Regards Kevin
what a great surprise a new video!!! happy new year! and thanks again for the help this year!
You too!
found your video while looking for help with aa job interview prep for Digital forensics. I'm literally on my last semester of my masters in Cyber security digital forensics. I really want to be in this field of work.
How has the job hunt been? Are you settled now?
@@vdej01 I was able to get a job as a pentester.
@jolt06 Congrats on the journey ahead!
I have an engineering background but exploring what opportunities are inforensics
Another good free tool that i think you missing.
Arsenal Image Mounter from Arsenal Recon, There is an free version and an payed version there can boot E01 files and auto unlock the the login.
Note, i do not work for Arsenal.
Is it the same as OSF mount? It sounds familiar. Thanks for bringing it up. I definitely missed many great tools.
@@forensicguy yes it is an tool for mainly mounting images but it can alot more, like it mounts the images as "real scsi disk" so windows see them as real hardware and there for volume shadow copy works.
i have the payed version and find the many function very very use full
oh yeah and the rcmp is your best friend because no matter what price you give them they will pay the full price , i know because i deal with the rcmp customers as well , they pay handsomely , there your best customers , i did find you right away ....
Merry christmas and happy new year lol
Law enforcement definitely pays but they have a limit how much they will pay
Well, good information. Things have come a long way in the last 15 years since I got out of forensics. Although I am not certified like you, nor did I have all the gear you have, I did do a lot of data recovery for a few shops. Encase was nice back in the day. Are you open to the public to do some chip repairs? Or open to giving some advice on equipment for pulling data off of a damaged chip?
What are your thoughts on GIAC certs geared towards Digital Forensics? Such as GCFA or GCFE? Are they compatible to positions like yours in the field? Also you mentioned about running your own digital forensics company, how does that work legally? Is that more geared towards consulting for private and government companies?
Now for the most important question, how do you make your tea? I can't seem to make green tea taste good. 😂
plain!
Hi. You summarized the DF master's degree program I'm finishing this Spring semester in one long video. Have you done discovery work for a civil case?
Glad my video was helpful! I do mostly civil work. How long was your program?
@@forensicguy 2 years. However, in some cases I learned more from you than from some of the professors from the program. One of my classes this semester was about eDiscovery for the DFE. So I was wondering how much eDiscovery works a real DFE does?
What is the cost of the CCE exam?
ISFCE is going through restructuring at the moment, you might want to look into other certs for now until they are back on their feet. The CCE cert is still valid and I was just recertified this month, but I am not sure if they are taking on new members at the moment.
How would you go about getting into a career in mobile forensics?
Same idea
@@forensicguy Sorry what do you mean? What is the first step into getting started in digital forensics? What cert should I start with?
Hi . Thank you for the video. I’ve been in law enforcement for almost 20 years and am considering a move to digital forensics. A small company has offered me a job an a great deal of cellebrite training . I’m really interested but wonder if it’s too vendor specific. I’ve used XRY and been exposed to cellbrite reader but worry it my be too limited. Any thoughts appreciated.
I had XRY.. after update to v7 I HATED IT and never renewed it. I prefer cellebrite over anything
Hey, have you ever used Datapilot 10 device or heard about it? How would a phone extraction compare to UFED?
I was given a live demo last year. It’s different than UFED. It’s more for live data acquisition especially for 3rd party apps. They have a screen recording feature that can automatically capture apps otherwise not supported by most forensic tools. It would be more useful for law enforcement in the field that just need a quick or very specific collection.
@@forensicguy I would agree that it seems more useful for someone on the field/scene. Usually in the lab you have more powerful tools or even just computer.
Maybe useful in situations like in Ukraine where your lab is not usable due to it being in constant danger. Having a "mobile lab" seems the next best thing in that case.
I also realized that these devices are 4+ years old. It also has a micro-USB port and I wonder how much of a hindrance that would be if compared to like a USB-C port. Ideally I'd like it to have two USB-C ports and a proper SSD (instead of SD-card).
What metadata can be recovered if any at all from cached images in apples photo gallery photo picker?
Anti forensics is a more worthwhile field. If a device can’t remember anything, nothing can be recovered 😉
😁
Where start in computer forensics? Maybe update the title to where to start?
Wow, I looked at this title bunch of times, other people too and nobody noticed it. Thanks for pointing it out. I will fix it
I'm currently a 3rd year forensic science student, do you its still possible to pursue DF with my course and not computer science?
Finish CS and then you can go into DF
@@forensicguy thanks man
What types of forensics have you done besides, the more negative. Somebody sent off viruses or something.
hi sir my ssd is dead 1 chip if i remove that chip can i run it that ssd again sir pls answer me
It wouldn’t work
@@forensicguy yes sir if i buying 1 dead ssd and i put the good nand chip again it can work sir? pls answer me sir thank you sir
hey what happen to you lol
Busy af
@@forensicguy Canada bans TikTok on government issued mobile devices hahahahha
Would be super interested to see a video of you doing recovery from a gpixel running graphene👀