Posts Tagged ‘forensic data recovery’

Most Recent
 
Read More
2018-01-17

Basics of Powershell Scripting

It is a good idea using Powershell Scripting for DFIR, system administrators and a field work. Hrushikeshk has shared a post ‘Powershell 101’ which contains on notes about how to use Powershell Scripting.

 

19
 
Read More
2018-01-14

Data Carving with Foremost

Foremost is a console program for carving files based on its headers, footers and internal data structure. Utility Foremost wrote two special agents of the US Air Force from the special department. investigations. It is an extremely useful tool and very easy to use, but with its shortcomings. Foremost does not restore the folder structure and retains original file names and tags.

 

36
 
Read More
2018-01-11

iOS Imaging

This article will discuss the jailbreaks for iOS 10.3.3 using Meridian and iOS 11 using LiberiOS. You need to get physical access to the device and capture data to start the study.

37
 
Read More
2017-11-13

Hiding Registry keys

Brian Reitz is a senior threat analyst. He wanted to test the detection of various types of registry stamina. One of the methods used by the Kovter malware family. It is the perseverance trick. This trick is described in detail in a report from Symantec for September 2015 and analyzed by MalwareBytes, Airbus Cybersecurity and Reagta. The Windows Registry is an area for detecting blue commands, because the “tubeless” methods become more common.

47
Latest Headlines
 
Read More
17
 
Read More
37
 
Read More
128

Trending Topics
digital forensics
computer forensics
mobile forensics
Articles
DFIR
digital forensics software
Android forensics
windows forensics
iOS forensics
Top Stories
 
 
Right Now
 
bstrings 1.0 released
Top Five
Heat Index
 
1
Decrypting encrypted WhatsApp databases without the key
 
2
Chip-off Technique in Mobile Forensics
 
3
How to Make the Forensic Image of the Hard Drive
 
4
Extracting WhatsApp database and the cipher key from a non-rooted Android device
 
5
Android forensic analysis with Autopsy