whereisyourdata

19 Episodes

Reverse

Computer Forensics: Tracing an Email (Hotmail)

2009-06-1002:18

A video guide on how to trace a hotmail

Imaging a Hard Drive with EnCase

2009-06-0707:45

Computer Forensics: Date for a File (in the MFT)

2009-05-3106:26

Files can have many dates, the first 4 dates for a file (in the MFT) are shown in this video. Looking at the $Standard_Information Attribute within the MFT. The examination is conducted using EnCase. These dates are important for those conducting forensic examinations

Computer Forensics: What Happens When You Delete Files?

2009-05-0203:33

Computer Forensics - What happens when a file is deleted?

WikiLeaks: How to upload to WikiLeaks

2009-04-1903:08

How to use WikiLeaks secure site.

Computer Forensics: Examining a Wiped Drive with EnCase

2009-03-0401:53

What happens when a drive is wiped? Can the data be recovered? What can computer forensics find? This short video looks at a wiped hard drive with EnCase

Computer Forensics: FTK Keyword Searching

2009-02-0104:00

Using the popular computer forensics tool, FTK 1.x to keyword search a small set of data.

Computer Forensics: Opening an EnCase E01 File

2009-02-0102:16

How to open an EnCase E01 File

Open hard drive in a bell jar with data activity LEDs

2008-12-0401:37

Open, working, hard disk drive running inside a glass bell jar... with data activity speed LED's!

MSN Encryption Part 2

2008-10-0402:29

Can you secure MSN? Does the encryption work?

MSN Encryption Part 1

2008-10-0409:13

Is it possibly to have a private conversation on a public network? Is MSN secure, if not can it be made secure?

Tor Beginners Guide (Part 1)

2008-09-2703:56

An introduction to "Tor". Tor is well known for hiding/anonymising IP addresses, but does it work, and can it be used?

Encase: Viewing Resident Data

2008-09-1902:34

Viewing resident and non resident data (i.e data within the MFT) with EnCase

Computer Forensics: Recovering Deleted Files With Encase

2008-09-1802:37

Recovering a deleted file with Encase, from an NTFS formatted USB drive

Computer Forensics: Examining File Slack with EnCase

2008-08-3103:49

Demonstrating File slack with with EnCase. File slack can, sometimes, contain information relevant to a case. Even if it does not its important for computer forensics examiners to understand the difference between active files, deleted files, and slack hits.