Posts Tagged ‘hiberfil.sys forensics’

Most Recent
 
Read More
2017-03-10

Hiberfil.sys Analysis with Hibernation Recon

Forensic examination in the registry has long been referred to the analysis of only readily available Registries from Microsoft Windows®, often one at a time, in vain takes a lot of time and an archaic way. Registry Recon is not just another Registry parser. Digital forensics experts armed with Hibernation Recon are now able to leverage not only the active contents of Windows hibernation files, but also massive volumes of information in the multiple types (and levels) of slack space that often exist within them.

 

451
 
Read More
2016-05-04

Uncompress hiberfil.sys with Hibr2Bin

Hibr2Bin is a tool developed by Comae Technologies (ex MoonSols), which enables a digital forensic examiner to uncompress Windows hibernation file (hiberfil.sys).

985
Latest Headlines
 
Read More
661
 
Read More
369
 
Read More
738

Trending Topics
digital forensics
computer forensics
Articles
mobile forensics
DFIR
digital forensics software
Android forensics
windows forensics
incident response
Top Stories
 
 
Right Now
 
bstrings 1.0 released
Top Five
Heat Index
 
1
Decrypting encrypted WhatsApp databases without the key
 
2
How to Make the Forensic Image of the Hard Drive
 
3
Extracting data from SmartSwitch backups
 
4
Forensic tools for your Mac
 
5
An Overview of Web Browser Forensics