geschonneck.com

Brian Kaplan from Carnegie Mellon University just released a tool called Live View. With Live View you can convert a raw dd image or physical device to a VMware virtual machine. more…

Brian Carrier just released a new version of his computer forensics tool kit *).
Changes on The Sleuth Kit (TSK): more…

Charlie Paglee recently published on his blog, that the a chinese company successfully reverse engineered the Skype protocol! more…

The Internet Security Zone Blog published an interesting article about the FBI forensic analysis of the stolen veteran’s administration laptop that more…

Cell Phone Forensics Tools

Last year the NIST published an interesting paper about Cell Phone Forensics Tools. They tested a couple of this tools and made some interesting remarks on working with them.
more…

Arne Vidstrom from ntsecurity.nu wrote an interesting paper about problems with forensic RAM dumps from Windows XP. His summary on this topic more…

Hello,

I updated my wordpress. Please let me know, if you have problems using this site.

Cheers
Alex

I published a new article about computer forensics in the German security journal KES (The Information Security Journal). The main focus is about the S-A-P investigation method (Secure Analyze and Present) and which tool function is really needed.
You can read more about the content on my German computer forensics blog.

New versions from Sleuthkit & Autopsy.

Brian Carrier published new versions from his outstandig open source forensics tools.

Sleuthkit 2.04 has the following bugfixes and new features (taken from changelog):

more…

McAfee recently published a study about stealth malware – also known as Rootkits.

Some of the key findings are: more…