Category: Uncategorized

Free Mac & iOS Resources for the DFIR Community

By

Members of the forensic community often take it upon themselves to create scripts, custom artifacts, or software to aid in their investigations, then share with others, which I’ve always loved. The talent our community guild has is truly awesome, and I’m thankful to be a part of it. This blog isn’t meant to be an end all, be all of every publicly available Mac … Continued

Our Commitment to Equality and the Justice Sector

By

The death of George Floyd at the hands of a Minneapolis Police Officer, with other officers looking on, and the subsequent events surrounding it throughout North America and now the world has given us pause for reflection. We have had many thoughts, emotions, and questions since. What we can say definitively is that racism is … Continued

Thank You to Everyone on the Front Lines of This Crisis

By

On behalf of everyone  at Magnet Forensics, we want that this opportunity to thank all the first responders and health care professionals who are working around the clock to ensure the health and safety of our communities around the world during this global COVID-19 pandemic. Your tireless efforts are unbelievably crucial at this time, and … Continued

Decrypting More Dropbox Files: config.dbx

By

Back in March of this year we released a free tool to decrypt the Dropbox filecache.dbx file which stores information about the files in a user’s Dropbox repository (for more details read the blog post, and the Part 2 post). Paul Henry (Website: http://www.vnetsecurity.com, twitter: @phenrycissp) is a SANS instructor and the lead author and teacher of the FOR559 course, Cloud Forensics & … Continued

Dropbox filecache.dbx file decrypted – now what?

By

Welcome to a “Part 2” of my last blog post where I announced our new free tool for decrypting the Dropbox filecache.dbx file. The response has been overwhelming and we appreciate all the comments and feedback. We really do have a great digital forensics community. Please note that IEF Triage has supported decrypting and parsing … Continued

Decrypting the Dropbox filecache.dbx file – new free tool!

By

Happy Friday, everyone! Today I would like to introduce a new free tool we’ve just released, called Dropbox® Decryptor. But first, some background. Dropbox uses a file named filecache.dbx to store details about files that have been or will be synced to the Dropbox cloud. This file used to be a SQLite database (named filecache.db) … Continued