Live Evidence Preview with Shadow 2
For the German journal iX we tested recently the Shadow 2 box from VOOM Technologies
Schlagwort: digital forensics
NIST Draft on Cell Phone Forensics
NIST recently published a new draft on Cell Phone Forensics for public comment. Download here.
Computer Forensics Training in Berlin
My company the HiSolutions AG plans a hands on computer forensics training in Berlin. More information are available on http://computer-forensik.org in geman language.
The Sleutkit 2.06 and Autopsy 2.08
Brain Carrier just released new version of his disk forensics tools. You can download The Sleuthkit 2.06 an Autopsy 2.08 from http://www.sleuthkit.org/. Update: There is a new windows version available.
Live View released
Brian Kaplan from Carnegie Mellon University just released a tool called Live View. With Live View you can convert a raw dd image or physical device to a VMware virtual machine.
The Sleuth Kit 2.05 released
Brian Carrier just released a new version of his computer forensics tool kit *). Changes on The Sleuth Kit (TSK):
Cell Phone Forensics Tools
Cell Phone Forensics Tools Last year the NIST published an interesting paper about Cell Phone Forensics Tools. They tested a couple of this tools and made some interesting remarks on working with them.
Forensic memory dumping issues
Arne Vidstrom from ntsecurity.nu wrote an interesting paper about problems with forensic RAM dumps from Windows XP. His summary on this topic
Sleuthkit 2.04 and Autopsy 2.07 published
New versions from Sleuthkit & Autopsy. Brian Carrier published new versions from his outstandig open source forensics tools. Sleuthkit 2.04 has the following bugfixes and new features (taken from changelog):
windows memory analysis
Andreas Schuster recently published on his blog two interesting articles about process memory reconstruction. He describes how to