Girl, Unallocated

Pages

Home
DFIR Cartoons

Labels

case experience FE Side Geekness Iraq Kinda Sorta Useful Musings Scripts Travel Tutorial TV

DFIR Cartoons

Email This BlogThis!Share to Twitter Share to Facebook

No comments:

About Me

Girl, Unallocated: GCFE, CCE, EnCE, ACE - Fighting IP theft and fraud by day, blogging about random thoughts by night... I am GU

View my complete profile

Disclaimer

The contents of this blog are my opinion, and do not represent the views or opinions of my employers or any organizations I am am a part of. Also, I am not a lawyer. That about covers it.

My Blog List

Windows Incident Response

Reading - I wanted to share some of the interesting items I've read over the passed couple of weeks, and in doing so, I think that it's important to share not just t...
2 hours ago
Command Line Kung Fu

Episode #167: Big MAC - Hal checks into Twitter: So there I was, browsing my Twitter timeline and a friend forwarded a link to Jeremy Ashkenas' github site. Jeremy created an ali...
1 day ago
Linux Sleuthing

TextMe App: Lesson Learned from Unusual Tables - I recently had the opportunity to help a colleague with an iPhone database that was not supported by his automated tools. The application was the TextMe ...
1 day ago
Melissa Augustine's Blog

Sneaky Sneak PHP - Not too long ago I came across a PHP script (called default.php) on a webserver... and *something* did not look right (Base64 shortened for sanity sake) ...
4 days ago
Memory Forensics

Final Week of Month of Volatility Plugins II is posted - We are writing as the final week of the second installment of the Month of Volatility Plugins is now posted. Volatility 2.3 is currently in beta, and the b...
5 days ago
Digital Forensics Blog

This 'n That - Hello world! I wanted to let you know why I haven't been putting up any new posts lately and also tell you about some great stuff on other blogs. First, I h...
3 weeks ago
Lost In The Flood

Testing out CommaFeed to replace Google Reader - In order to replace Google Reader, I've been looking at different platforms and companies. I had been set on migrating to Feedly until I saw this come acr...
3 weeks ago
Forensic Methods

SANS FOR408 vs. FOR508 - With the major expansion of forensic curriculum at the SANS Institute, I frequently get questions about what class(es) to take. If you are trying to decide...
3 weeks ago
Journey Into Incident Response

Unleashing auto_rip - The most common question someone asks me after they find out the work I do for a living is “what tools do you use”. This occurs regardless if the person only...
4 weeks ago
A Fistful of Dongles

Ever Get The Feeling You’ve Been Cheated? - The famous John Lydon quote strikes me as an appropriate title for a blog post on the state of digital forensics academic programs in the United States. I ha...
4 weeks ago
The Digital Standard

The White "X" - New blog post this morning on SpiderLabs Anterior!
5 weeks ago
nibble on dav nads

Melting snow, flash floods, and only a new 4n6time release ;-) - So where ever Kristinn Gudjonsson lives, there are apparently Flowers, blossoming trees and a new plaso release.* *That must be really nice. In Chicago we...
1 month ago
forensics for the newbs

CEIC Bound - Has it been that long? Sorry folks, I had some personal things to tend to over the last few months so here’s a quick update… I spoke back in October again ...
1 month ago
grand stream dreams

ForSec News Roundup - Final GSD post of the weekend. Strategies of a world-class computer security incident response team - Help Net Security - Carson Zimmerman presents “…t...
1 month ago
JL's stuff

Upcoming Events and Trainings - I have several speaking and training events that are coming up this year that may be of interest to others in the community: I will be speaking at the New...
1 month ago
Random Thoughts of Forensics

Malware Roulette - When I started my move into malware incident response my training options entailed 3rd party, on the job, or utilizing a piece of malware from a trusted sour...
2 months ago
Faintingchicken's Blog

Cutting Edge Forensics - Given that Channel 4 has dropped Time Team from their schedules (repeats are still however available on More 4, Channel 47 and any other Channel 4 variants...
2 months ago
Forensics with Fowler

Artifacts left by Twitter Web Interface and TweetDeck - *(Note: This posting is a modified version of a presentation I made to the Digital & Multimedia Evidence Section of the American Academy of Forensic Scien...
2 months ago
Forensics from the sausage factory

Location Data within JPGs - We have become accustomed to fact that many of our digital photographs have location data embedded within them, populated with a GPS receiver. This data is...
3 months ago
Forensicaliente - because digital forensics is 'hot'

Getting Your Feet Wet / Joining the Conversation - Well, I've been "working" on this post for quite some time now, and just haven't ever wrapped it up. Bah. To show how long I've been "working" on it, I c...
3 months ago
Forensic Focus Blog

Interview with Robert Bond, Product Marketing Manager, Guidance Software - Robert, please tell us a little about yourself and your role at Guidance Software I’m the new Product Marketing Manager of Forensic Solutions which inclu...
3 months ago
Cheeky4n6Monkey - Learning About Digital Forensics

Creating a Perl script to retrieve Android SMS - This script/post was inspired by *Mari DeGrazia* after she had to manually parse hundreds of Android SMS messages. Without her prior research and the pri...
3 months ago
CDFS Blog

CDFS Election Results - The results are in, the votes have been counted, and the first official Consortium of Digital Forensic Specialists board election has been successfully com...
4 months ago
Happy as a Monkey

Post-conviction Client Satisfaction Form - This post was inspired by a Twitter conversation with the most excellent @forensication, whose dog I once helped rescue when it went missing in the Bronx. ...
5 months ago
Computer Forensics for Blondes

Amusing comic of the week - Just thought this was quite amusing ...
1 year ago
Bye Nary Trenches - A Journey Through Lilliput

Whats in an IPD? - I responded to an email yesterday on the CCE list serve about what data might be backed up from a BlackBerry into an IPD file. This very long response i...
1 year ago
mike's blog | WriteBlocked

New stuff -
1 year ago
Unchained Forensics

Making My Way Back - Hello again. After a few months of not only the hectic holiday times, but getting settled into a new company and position as well as some training and swit...
1 year ago

Show 10 Show All

Subscribe To

Posts

Atom

Posts

All Comments

Atom

All Comments

Total Pageviews

Follow by Email

About the Name

Unallocated space refers to the clusters on a digital media that are designated by the system as not containing active data. This area can, and frequently does, hold information that was previously on the system, but that has not been removed. For forensicators, it is a goldmine of information.

Awesome Inc. template. Template images by molotovcoketail. Powered by Blogger.