Difference between pages "Paraben SIM Card Seizure" and "Microsoft Office"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Overview)
 
(External Links)
 
Line 1: Line 1:
Paraben has acquired SIMCon and has integrated it into SIM Card Seizure and Device Seizure. Recover deleted sms/text messages and perform comprehensive analysis of SIM card data. SIM Card Seizure takes the SIM Card acquisition and analysis components from Paraben's Device Seizure and puts it into a specialized SIM Card forensic acquisition and analysis tool. SIM Card Seizure includes the software as well as a Forensic SIM Card Reader. If you already have Device Seizure & the Device Seizure Toolbox, there's no need for you to get SIM Card Seizure as well because they contain the components to perform a forensic SIM Card acquisition and analysis. This tool is for the investigator who only wants to acquire SIM Cards and does not want to perform forensic exams of all cell phone data.
+
{{expand}}
  
SIM Card Seizure has unicode support to read multiple languages such as Arabic, Chinese, & Russian: Features:
+
== EventLogs ==
 +
As of Office 2010 related Office Alerts EventLog:
 +
<pre>
 +
C:\Windows\System32\winevt\Logs\OAlerts.evtx
 +
</pre>
  
    * Forensic SIM Card Reader Included
+
== See Also ==
    * Calculates MD5 & SHA1 Hash Values
+
* [[Microsoft Office File formats]]
    * Search Function
+
    * Recovers Deleted SMS Data*
+
    * Bookmarking Options
+
    * Report Creation Wizard
+
    * Save Workspaces for Further Review
+
    * Time Stamps Calculate GMT Offset
+
    * Access to Paraben's Forum
+
    * Access to Paraben's 24 Hour Support
+
  
Data Acquired from SIM Cards
+
== External Links ==
 +
* [http://dfstream.blogspot.com/2014/01/ms-excel-2013-last-saved-location.html MS Excel 2013 Last Saved Location Metadata], Jason Hale, January 12, 2014
  
    * Phase Phase ID
+
[[Category:Analysis]]
    * SST SIM Service table
+
    * ICCID Serial Number
+
    * LP Preferred languages variable
+
    * SPN Service Provider name
+
    * MSISDN Subscriber phone number
+
    * AND Short Dial Number
+
    * FDN Fixed Numbers
+
    * LND Last Dialed numbers
+
    * EXT1 Dialing Extension
+
    * EXT2 Dialing Extension
+
    * GID1 Groups
+
    * GID2 Groups
+
    * SMS Text Messages
+
    * SMSP Text Message parameters
+
    * SMSS Text message status
+
    * CBMI Preferred network messages
+
    * PUCT Charges per unit
+
    * ACM Charge counter
+
    * ACMmax Charge limit
+
    * HPLMNSP HPLMN search period
+
    * PLMNsel PLMN selector
+
    * FPLMN Forbidden PLMNs
+
    * CCP Capability configuration parameter
+
    * ACC Access control class
+
    * IMSI IMSI
+
    * LOCI Location information
+
    * BCCH Broadcast control channels
+
    * Kc Ciphering key
+
 
+
SIM Card Seizure also acquires the whole catalog system with data in a tree-view presentation. Additionally, it can recover some deleted SMS data by analysis of unallocated space.
+

Revision as of 16:26, 13 January 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

EventLogs

As of Office 2010 related Office Alerts EventLog:

C:\Windows\System32\winevt\Logs\OAlerts.evtx

See Also

External Links