Collaborate Disseminate
I understand that in a Hard Disk Drive (HDD) there is EEPROM which stores calibration data. This is not directly accessible by any ring-3 (usermode) or ring-0 (kernel mode) programs.
I was curious as to whether changes to the HDD, such as … Continue reading EEPROM with HDD calibration data
Even if a criminal wears gloves, their cast-off DNA may still be present in a room’s air after they leave. A new study suggests that if such telltale material gets sucked up by an air conditioner, it could let forensic investigators know if a suspect h… Continue reading Air conditioners may help catch criminals, by snagging their DNA
Exploring a plist related with a flash pop-up when booting, I found this folders:
launchctl print gui/$(id -u)/com.apple.sharingd
…
path = /System/Library/LaunchAgents/com.apple.sharingd.plist
state = running
program = /usr… Continue reading How do I start inspecting, in a basic way, what a socket is or was doing?
Using Windows without creating forensic information is impossible. But you can make it harder. How to use a regular Windows 10 with least traces of forensics?
There are some important sources of forensic data:
Event logs
Admin can easily… Continue reading How to make windows forensic harder?
An experimental new forensic spray allows latent fingerprints to be made visible in just 10 seconds, plus it doesn’t require the use of any messy powders. What it does incorporate, however, is a glowing protein that’s obtained from jellyfish.Continue R… Continue reading Glowing jellyfish protein lights the way for better lifting of fingerprints
There are tons of VPN service providers that allow VPN connections for some little amount like 5-15$ per month. Imagine a malicious person using some of these services to hide his cyber-criminal activities. Say, he hacked a website resulti… Continue reading how public vpn service providers avoid being liable for illegal activity of their customers [migrated]
Morning, I recently had need to check for malware on my PC by dumping the memory and searching for unwanted processes which could be malware, my question it’s, is it possibile for malware to detect memory dumping, I am going to analyze the… Continue reading Can malware detect memory dumping?
I was very disappointed to hear that my friend, who had his Android phone seized not too long ago, has had his phone broken by police forensics.
As far as I know, it was a few years old, Samsung, and had a 20-digit password.
It seems that … Continue reading What can forensic analysts extract from a fully encrypted phone? [closed]
I’m currently studying forensics, and one thing that keeps coming up is the authorities breaking into phones.
There are several third party tools they can use, but one of the most popular is ‘Cellebrite’.
My understanding of this device wa… Continue reading Can Cellebrite be used to access any phone by the government? What is the point of encryption if they can get into any phone?
Although most of our clothes fold and crease with our bodies as we move, our shoes maintain the same shape and appearance pretty much all the time. With that fact in mind, scientists are now developing a method of catching criminals via shoe ID.Continu… Continue reading New forensic tech may nab criminals by the look of their shoes