Athena Forensics

Introduction Cryptographic hash functions such as MD5 and the SHA family are fundamental to digital forensics, incident response, malware analysis, and evidence handling. A file hash is a mathematically generated value derived from the contents of a file. Even a single-bit alteration in a file produces a completely different hash value. Hash analysis allows investigators […]

Introduction Windows Explorer, known as File Explorer in modern versions of Microsoft Windows, is the graphical file management application that allows users to browse, access, copy, move, and manage files and folders stored on a computer. Since its introduction in Windows 95, Windows Explorer has been a core component of the Windows operating system, providing […]

WhatsApp has become one of the most widely used communication platforms in the world, with billions of messages exchanged every day. As a result, WhatsApp conversations frequently form part of investigations involving criminal cases, family disputes, employment matters, and civil litigation. One of the most common questions asked during a digital investigation is whether deleted […]

Technical Overview The KnowledgeC database is part of Apple’s CoreDuet framework, which records information about how a user interacts with their device. It is designed to improve system intelligence by learning user behaviour rather than storing application data directly. Examples include: Unlike application databases, KnowledgeC acts as a central repository of behavioural events collected from […]

Foundations of Computer Forensics Introduction Computer forensics (also referred to as digital computer forensics or computer forensic examination) is the scientific process of identifying, preserving, acquiring, analysing and presenting digital evidence obtained from computer systems in a manner suitable for legal proceedings. Modern investigations rarely involve a single desktop computer. Instead, investigators encounter interconnected ecosystems […]