Live View released
Brian Kaplan from Carnegie Mellon University just released a tool called Live View. With Live View you can convert a raw dd image or physical device to a VMware virtual machine.
Author: Alexander Geschonneck
The Sleuth Kit 2.05 released
Brian Carrier just released a new version of his computer forensics tool kit *). Changes on The Sleuth Kit (TSK):
Skype Protocol Has Been Cracked
Charlie Paglee recently published on his blog, that the a chinese company successfully reverse engineered the Skype protocol! 😯
Forensic analysis of the stolen laptop
The Internet Security Zone Blog published an interesting article about the FBI forensic analysis of the stolen veteran’s administration laptop that
Cell Phone Forensics Tools
Cell Phone Forensics Tools Last year the NIST published an interesting paper about Cell Phone Forensics Tools. They tested a couple of this tools and made some interesting remarks on working with them.
Forensic memory dumping issues
Arne Vidstrom from ntsecurity.nu wrote an interesting paper about problems with forensic RAM dumps from Windows XP. His summary on this topic
WordPress udpate
Hello, I updated my wordpress. Please let me know, if you have problems using this site. Cheers Alex
Forensics article in KES
I published a new article about computer forensics in the German security journal KES (The Information Security Journal). The main focus is about the S-A-P investigation method (Secure Analyze and Present) and which tool function is really needed. You can read more about the content on my German computer forensics blog.
Sleuthkit 2.04 and Autopsy 2.07 published
New versions from Sleuthkit & Autopsy. Brian Carrier published new versions from his outstandig open source forensics tools. Sleuthkit 2.04 has the following bugfixes and new features (taken from changelog):
Rootkits threat study
McAfee recently published a study about stealth malware – also known as Rootkits. Some of the key findings are: