Forensic is a strict science and we should let the evidence speak for itself. Several months ago I still could recovered Line deleted chat messages as below:…
Let me show you the WeChat version first. It is 6.3. What will happen to WeChat deleted chat messages? Take a look at "Blocks containing deleted data" and those deleted messages were wiped. What about WhatsApp? The version is 2.12.317. Fortunate…
The evidence is iPhone 5s with iOS 9.1 and not jail breaked. I use UFED to do advanced logical extraction just now. All I know is that suspect did use Naver LINE a lot. Unfortunately I did not recover any deleted LINE chat messages after advanced log…
Line is one of the most popular messaging Apps, especially in Asia. On March 3 I downgraded the app LINE to an earlier version and extract the database successfully. Later this apk downgrade method feature became available in UFED as shown in UFED 5.…
epmd进程和Erlang节点进程如影随形,在Rabbitmq集群,Ejabberd集群,Couchbase集群产品文档中都会有相当多的内容讲epmd,epmd是什么呢? epmd 是Erlang Port Mapper Daemon的缩写,全称足够明确表达它的功能了(相比之下,OTP就是一个难以从字面理解的名字);epmd完成Erlang节点和IP,端口的映射关系,比如在我的测试机上, [root@nimbus data2]# epmd -names epmd: up and run…
Entities An entity is a lightweight persistence domain object. Typically an entity represents a table in a relational database, and each entity instance corresponds to a row in that table. The primary programming artifact of an entity is the entity c…
OpenSSL Command-Line HOWTO The openssl application that ships with the OpenSSL libraries can perform a wide range of crypto operations. This HOWTO provides some cookbook-style recipes for using it. Paul Heinlein | November 10, 2015 https://www.madboa…
mod_event_socket Skip to end of metadata Created by John Boteler, last modified by Niek Vlessert on Nov 14, 2014 Go to start of metadata About mod_event_socket is a TCP based interface to control FreeSWITCH. The default values are to bind to…
