Comments for @Forensicxs

Comment on Computer Forensics : Hacking Case using Autopsy by Christian Leomar De Jesus

Christian Leomar De Jesus — Sun, 23 Mar 2025 19:40:24 +0000

For Question 19: I used Autopsy and used a Keyword Search for the NNTP ‘news.dallas.sbcglobal.net’ and got 4 results. 2 of them can be removed since they were never modified or accessed. The other two related to programs would be one that you already found NTUSER.DAT and the other would be AGENT.INI. From the location address we can see that AGENT.INI is in vol_vol2/Program Files/Agent/Data/AGENT.INI

Comment on Spam and WordPress by Jeannette J

Jeannette J — Fri, 24 Mar 2023 17:46:22 +0000

Your article is still helping bloggers three years later! Thank you from a newcomer to WordPress.

I recently moved my blog to the new domain, so I want to do everything I can to encourage interaction with my readers. I don’t want to delete any legitimate messages by mistake! But I also don’t want to expose my readers to spam.

Your article helped me determine that several seemingly legitimate comments were in fact spam. Helps tremendously knowing there are creditable sources looking into these websites and IP’s.

Thanks for doing so much detective work!

Comment on Computer Forensics : Network Case using Wireshark and NetworkMiner by Forensicxs

Forensicxs — Sun, 06 Mar 2022 20:44:06 +0000

In reply to Lucas.

Hi Lucas, thanks for your comment. elishevet@gmail.com and jcoach@gmail.com are not the same person, this is not my meaning here. I was explaining that I had found a way to catch emails associated to some IP/MAC data, and by carefully checking the PCAP records, I found the frame 78990 which helps narrow down to Johnny Coach. Please read the other comments in the chat, especially with “Kinimod”, as we can see that this exercise has some limitations.
Hope this helps !