<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-1746946614390371171.post9039278886956524080..comments</id><updated>2010-01-11T04:33:30.683-08:00</updated><category term='Cell Phones'/><category term='CRLF'/><category term='Wireless'/><category term='Vista'/><category term='Kindle'/><category term='CP'/><category term='File Signatures'/><category term='Hash'/><category term='SQL'/><category term='File System'/><category term='Email'/><category term='Patch'/><category term='Exclusion List'/><category term='dd'/><category term='SHA1'/><category term='MFT'/><category term='Photos'/><category term='Service Pack'/><category term='Keywords'/><category term='Import'/><category term='Encryption'/><category term='Firewall'/><category term='export'/><category term='EnScript Requests'/><category term='Install Date'/><category term='Timestamps'/><category term='Office Metadata'/><category term='NIST'/><category term='Password Bypass'/><category term='EnScript Tutorial'/><category term='MAC Address'/><category term='Domains'/><category term='GREP'/><category term='Thumbnails'/><category term='FTP'/><category term='USB History'/><category term='Virus'/><category term='Search Hits'/><category term='Bookmark'/><category term='MD5'/><category term='Winen'/><category term='LogFile'/><category term='EMLX'/><category term='Video'/><category term='Operating System'/><category term='Yahoo'/><category term='Duplicates'/><category term='Icons'/><category term='USNJRNL'/><category term='Restore Points'/><category term='Windows 7'/><category term='Base64'/><category term='Unallocated'/><category term='eBlaster'/><category term='Ghost'/><category term='XOR'/><category term='VSS'/><category term='Selected Text'/><category term='Network Information'/><category term='Forensic Practical'/><category term='Decode'/><category term='SANS'/><category term='Extensions'/><category term='Limewire'/><category term='Search'/><category term='Registry'/><category term='OSX'/><category term='IIS'/><category term='Unused Disk Space'/><category term='Event Logs'/><category term='Norton AV'/><category term='Foreign Language'/><category term='Lanman'/><category term='Redaction'/><category term='UserAssist'/><category term='ICAC'/><category term='LUHN'/><category term='Count'/><category term='Filename'/><category term='thumbcache'/><category term='ROT13'/><category term='HTML'/><category term='Incident Response'/><category term='Anti-Forensics'/><category term='Memory'/><category term='Internet History'/><category term='LEF'/><category term='File Types'/><category term='Triage'/><category term='SearchPak'/><category term='F-Response'/><category term='BitLocker'/><title type='text'>Comments on Computer Forensics, Malware Analysis &amp;amp; Digital Investigations: Windows 7 Forensics - Part IV - Thumbcache_*.db</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://www.forensickb.com/feeds/9039278886956524080/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html'/><author><name>Lance Mueller</name><uri>http://www.blogger.com/profile/15789264000499223230</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>3</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-6066173228990433931</id><published>2010-01-11T04:33:30.683-08:00</published><updated>2010-01-11T04:33:30.683-08:00</updated><title type='text'>I have just tested this in FTK 3.0.4. It does not ...</title><content type='html'>I have just tested this in FTK 3.0.4. It does not parse the files. It does show the embedded images when you turn on carving options during evidence processing.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default/6066173228990433931'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default/6066173228990433931'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html?showComment=1263213210683#c6066173228990433931' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-9039278886956524080' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/9039278886956524080' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1396603581'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-4282236932765039722</id><published>2010-01-10T23:41:40.011-08:00</published><updated>2010-01-10T23:41:40.011-08:00</updated><title type='text'>You should use [ / ] (or other symbols of your cho...</title><content type='html'>You should use [ / ] (or other symbols of your choosing) instead of &amp;lt; / &amp;gt; when writing HTML or escape them as &amp;amp;lt; / &amp;amp;gt;. Otherwise it won&amp;#39;t show up, as it happened in this post with &amp;lt;username&amp;gt;.&lt;br /&gt;&lt;br /&gt;Thank you for the useful posts.&lt;br /&gt;&lt;br /&gt;Best regards.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default/4282236932765039722'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default/4282236932765039722'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html?showComment=1263195700011#c4282236932765039722' title=''/><author><name>cdman83</name><uri>http://www.blogger.com/profile/05030326541176171725</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='32' height='30' src='http://4.bp.blogspot.com/_hrvCBhtWhJ4/SPBrNYhIpxI/AAAAAAAAAMc/ylcGT7ni7S4/S220/maci.jpg'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-9039278886956524080' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/9039278886956524080' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1728630828'/></entry><entry><id>tag:blogger.com,1999:blog-1746946614390371171.post-8114823880341158651</id><published>2010-01-10T11:46:00.379-08:00</published><updated>2010-01-10T11:46:00.379-08:00</updated><title type='text'>Thumbnail Expert - http://www.thumbnailexpert.com</title><content type='html'>Thumbnail Expert - http://www.thumbnailexpert.com</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default/8114823880341158651'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/1746946614390371171/9039278886956524080/comments/default/8114823880341158651'/><link rel='alternate' type='text/html' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html?showComment=1263152760379#c8114823880341158651' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://www.forensickb.com/2010/01/windows-7-forensics-part-iv.html' ref='tag:blogger.com,1999:blog-1746946614390371171.post-9039278886956524080' source='http://www.blogger.com/feeds/1746946614390371171/posts/default/9039278886956524080' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-484292505'/></entry></feed>
