Volatility 3 Cheatsheet

https://blog.onfvp.com/post/volatility-cheatsheet/
#Memory_Forensics

How To Decrypt BitLocker Volumes With Passware

Read the article from forensicfocus

https://www.forensicfocus.com/articles/how-to-decrypt-bitlocker-volumes-with-passware/
#Memory_Forensics

Magnet Axiom 5.1 released just now.

You can download the setup from here:

https://prod-releases.magnetforensics.com/axiom/5.1.0.24999/installer/AXIOMv510.24999setup.zip

To get the crack, contact @UnBin4A

Magnet 5.1

M1ssing Register Access Controls Leak EL0 State

https://m1racles.com/

Cracking FileVault 2 (HFS+ or APFS)

https://tinyapps.org/docs/cracking-filevault.html

Magnet Axiom (or Magnet Cyber)

Recovery images for Samsung devices
Compatible devices list:
Direct Link

Download recovery images – Part 1:
Direct Link

Download recovery images – Part 2:
Direct Link

To get the crack of latest version, Contact Telegram: @UnBin4A

#Magnet
#Axiom
#Cyber

Magnet Axiom (or Magnet Cyber)

Recovery images for Motorola devices
Download recovery images:
Download from here

To get the crack of latest version, Contact Telegram: @UnBin4A

#Magnet
#Axiom
#Cyber

Magnet Axiom (or Magnet Cyber)

Download mode for MTK chipsets
View compatible devices:
Direct Link

Download drivers:
Download from here


Download mode for LG devices
Download drivers:
Direct Link


EDL Mode for Qualcomm Chipsets
Download EDL programmers:
Direct Link

Download EDL drivers:
Direct Link


To get the crack of latest version, Contact Telegram: @UnBin4A

#Magnet
#Axiom
#Cyber

Nokia Lumia Windows Phone Extractions Using UFED 4PC

https://github.com/elceef/bitlocker

Bitlocker plugin for Volatility.

Course name: Computer forensics investigation

Link:
https://mega.nz/folder/LvQyGJwI#gy00PDSQUHvaEmLX6dqdqw

Cellebrite released a minor version for UFED 4PC

Logging in the Cloud From Zero (Incident Response)

#Cloud
#Forensics

Oxygen Forensic 13.6 released.
Here is release note

https://www.youtube.com/watch?v=G7WKqn1suqc

What is new in Oxygen 13.6

Crack is available.

To get the crack of latest version, Contact Telegram: @UnBin4A

Qualcomm Generic and Qualcomm Decrypting - How to Detect Supported Device Modes DFU/FTM/EDL/ADB

Question
To use the Qualcomm Generic or Qualcomm Decrypting methods, your device must be able to enter 1 of 3 modes: DFU, FTM, or EDL. Next 4 posts explains how to detect which mode your phone enters.

Ref: Cellebrite

#UFED_4PC

FTM
Some devices support a mode called FTM (Field/Factory Test Mode).
Among these are ZTE, Alcatel, and maybe others.
A device in FTM mode will sometimes display the letters "FTM" on the screen, but not always.
A device in FTM mode should use either Generic Qualcomm EDL or Generic Decrypting Qualcomm EDL methods (not the Recommended).
Certain button combinations may put a device in FTM mode.
A device in FTM mode will appear as the following picture in Device Manager:

FTM

DFU
Some devices support a mode called DFU, not to be confused with iPhone DFU.
ZTE devices support this mode, and perhaps others do too.
A device in DFU mode will usually display a black screen.
A device in DFU mode should use either Generic Qualcomm EDL (Recommended) or Generic Decrypting Qualcomm EDL (Recommended).
Certain button combinations may put a device in DFU mode.
A device in DFU mode will appear as the following picture in Device Manager: