Mensagens

Email atach

https://www.meridiandiscovery.com/articles/email-attachment-timestamps-forensics-outlook/

Ftk imager

http://andreafortuna.org/dfir/forensic-disk-images-of-a-windows-system-my-own-workflow/

Bulk extractor

https://andreafortuna.org/cybersecurity/bulk_extractor-extract-useful-information-without-parsing-the-file-system/
http://resources.infosecinstitute.com/category/computerforensics/introduction/free-open-source-tools/

Registry Browser v3 - Windows Registry Forensics

Registry Browser v3 - Windows Registry Forensics

How to Extract Content from VMDK Files

How to Extract Content from VMDK Files

ShellBags - Digital Forensics – Artifacts of interactive sessions | Count Upon Security

Digital Forensics – Artifacts of interactive sessions | Count Upon Security

Winmail Opener - freeware utility for opening winmail.dat and other TNEF-encoded files

Winmail Opener - freeware utility for opening winmail.dat and other TNEF-encoded files

Opening winmail.dat files | Litigation Support Tip of the Night

Opening winmail.dat files | Litigation Support Tip of the Night

Dealing with the 255 character limit for file paths in Windows | Litigation Support Tip of the Night

Dealing with the 255 character limit for file paths in Windows | Litigation Support Tip of the Night

David Koepi | Taking one byte at a time

David Koepi | Taking one byte at a time

Using Autopsy to examine an Android image | Free Android Forensics

Using Autopsy to examine an Android image | Free Android Forensics

My Digital Forensics Posts

My Digital Forensics Posts

Microsoft tools

https://gallery.technet.microsoft.com/office/

Enterprise Discovery just got better: EnCase joins Axcelerate at OpenText - OpenText Blogs

Enterprise Discovery just got better: EnCase joins Axcelerate at OpenText - OpenText Blogs