Albert Hui
@4n6h4x0r.bsky.social
🕵🏼♂️ ACFE fraud investigation trainer
🧑🏻🔬 HTCIA digital forensics speaker
🥷🏼 Black Hat speaker
🧑🏻🔬 HTCIA digital forensics speaker
🥷🏼 Black Hat speaker
Pinned
Albert Hui
@4n6h4x0r.bsky.social
· Nov 24
SSD Forensic Acquisition: The Inconvenient Truth
Do you know that the moment you plug an SSD (solid-state drive) into a forensic duplicator or a write-blocker that has power, the data can change, and you get a different MD5 (or SHA1 or SHA256 or any...
www.linkedin.com
Do you know the moment you plug an SSD into a forensic duplicator or a write-blocker that has power, the data can change, and you get a different MD5? Thereby making it challenging to make statement as to data #integrity in #forensic #legal proceedings?
www.linkedin.com/pulse/ssd-fo...
www.linkedin.com/pulse/ssd-fo...
parse_smsdb: Extracts iMessage, RCS, SMS/MMS chat history from iOS db file:
-Highlight row gaps (indicative of deletions)
-Annotate unsent msg
-Flattens edited msg data on to root table for easy review
-Output msg read time and annotate unread msg
github.com/h4x0r/parse_...
(pip install parse_smsdb)
-Highlight row gaps (indicative of deletions)
-Annotate unsent msg
-Flattens edited msg data on to root table for easy review
-Output msg read time and annotate unread msg
github.com/h4x0r/parse_...
(pip install parse_smsdb)
January 8, 2025 at 2:05 PM
parse_smsdb: Extracts iMessage, RCS, SMS/MMS chat history from iOS db file:
-Highlight row gaps (indicative of deletions)
-Annotate unsent msg
-Flattens edited msg data on to root table for easy review
-Output msg read time and annotate unread msg
github.com/h4x0r/parse_...
(pip install parse_smsdb)
-Highlight row gaps (indicative of deletions)
-Annotate unsent msg
-Flattens edited msg data on to root table for easy review
-Output msg read time and annotate unread msg
github.com/h4x0r/parse_...
(pip install parse_smsdb)
Do you know the moment you plug an SSD into a forensic duplicator or a write-blocker that has power, the data can change, and you get a different MD5? Thereby making it challenging to make statement as to data #integrity in #forensic #legal proceedings?
www.linkedin.com/pulse/ssd-fo...
www.linkedin.com/pulse/ssd-fo...
SSD Forensic Acquisition: The Inconvenient Truth
Do you know that the moment you plug an SSD (solid-state drive) into a forensic duplicator or a write-blocker that has power, the data can change, and you get a different MD5 (or SHA1 or SHA256 or any...
www.linkedin.com
November 24, 2024 at 1:20 PM
Do you know the moment you plug an SSD into a forensic duplicator or a write-blocker that has power, the data can change, and you get a different MD5? Thereby making it challenging to make statement as to data #integrity in #forensic #legal proceedings?
www.linkedin.com/pulse/ssd-fo...
www.linkedin.com/pulse/ssd-fo...
Is the "enhance" button in #CSI TV series real? No and yes.
#dfir #forensics
www.linkedin.com/posts/albert...
#dfir #forensics
www.linkedin.com/posts/albert...
Albert Hui on LinkedIn: #entropies #bayesian #image #video #forensics
Is the "enhance button" in the "CSI" TV series real?
Yes and no. Sure there is no enhance button, and State of Washington v. Puloka rejected admission of…
www.linkedin.com
November 12, 2024 at 7:50 PM
Is the "enhance" button in #CSI TV series real? No and yes.
#dfir #forensics
www.linkedin.com/posts/albert...
#dfir #forensics
www.linkedin.com/posts/albert...