Free DME & DFIR Resources

There is more Digital & Multimedia Evidence (DME) than any other type of evidence today.
Working together we've expedited tens of thousands of criminal investigations. Learn more

The FREE Windows File Recovery app is in the news again this week, with The Verge, ZDNet and others reporting on this "new" utility/tool.

Although it's not "new", as it was released in January, you likely haven't had a version of their OS that can run it until recently, unless you're an insider or developer. It is command line tool, but pretty simple to use (think PhotoRec/TestDisk). It can be used to recover from internal drives, HDD or SSD drives, cameras, USB and flash card storage. You'll need Win 10 version 19041.0 or higher.

This really should come as no surprise to folks in our industry, as Apple's support of QuickTime on Windows has waned over many years. It's also important to understand that I.T. is going to take a global approach to the new vulnerabilities, and will likely force removal of QuickTime from all hosts they control/manage. Your job, should you choose to accept it, is to explain to them why you are an exception, and to learn more about the available options and solutions to address your environment and needs. There are options.

As you may know, version 1.10.4 of Avery Lee's video capture/processing utility was released a little over a month ago. I've packaged it with several of the input plugins I regularly use, with one notable exception; the FFmpeg input plugin. I've had nothing but issues w/version 0.7 of the FFmpeg input plugin when used with version 1.10.4 of VirtualDub, so I've provided the source but did not install the plugin in my v1.10.4 package.

The v1.9.11 package contains all of the same input plugins, and version 0.7 of the FFmpeg input plugin is loaded automatically as well. Head past the break for the links to download.

As demonstrated in a series of articles published earlier in this blog, solid-state disks (SSD) tend to wipe deleted information on their own pace due to the way their garbage collection mechanism is designed. Wiped information cannot be recovered by any means, not even with expensive hardware, and not even by pulling flash memory chips out. It’s gone forever.

Full post

Forensic Video Analysis - FVA 101
dTective/ClearID/Avid - 4 Days

Forensic Video Analysis using Ocean Systems dTective and ClearID is 4 day course that provides a comprehensive approach to your casework for both digital and analog video evidence with a primary focus on our the stream-lined workflows and digital media processing.   It is intended for anyone who is new to the field of FVA or persons who have not been formally trained using these tools. 

Imaging expert Dave Helmly of Adobe will present new applications and discuss next generation possibilities during the "Imaging Supersession" at the upcoming LEVA conference. This LEVA event is the debut forum for CS4!!!!

Here is your chance to learn what is available and what’s on the horizon. You can share ideas in an open forum on imaging procedures and practices.

Click here for more information on the 2008 International Video Evidence Symposium and Training Conference!

Member Log-In

Remember Me

Membership is not available to the general public. Please use your government email address to register. See About Membership for details.

Smart Search

DME Resources Newsletter

Sign-up for the DME Resources"I may occasionally send an email" newsletter. Maybe quarterly? Semi-annually?

Well, what I can tell you is that your information will not be shared. See my Privacy Policy.

NOTE: Members of my site are NOT auto-subscribed or un-subscribed from this newsletter; they must manually Opt-In/Out.

Subscribe Today!

Who Doesn't Love Cookies?
DME Resources may place one or more Cookies on your computer. Cookies do not contain any personally identifying information, they allow me to customize my site based on your preferences. If you Decline cookies from my site, you may not be able to use all of the site's features.