Collaborate Disseminate
I’m currently in the process of researching for an assignment. In this assignment, I am asked to produce reports on new crimes enabled by technology and how, in Cyber Forensics, one would investigate said crimes.
I am having great difficul… Continue reading What is the forensic procedure in investigating DDoS attacks
i am trying to learn something about computer security, I decided to start from the linux world, through raspberry p3 with raspbian jessie OS
I would like to start with forensics file management, and I did a test on data recovery
I took an… Continue reading Recovery files fails Raspberry Pi 3b
In preparing exercises for a class on Digital Forensics, I am having trouble finding disk and memory images that are up-to-date. It seems like there was a lot of activity through 2010 or 2012, but there are only a few files since then. It… Continue reading Site with recent forensic images for experimentation and teaching? [closed]
It seems that the options of volatility have changed. How can I extract the memory of a process with volatility 3?
The "old way" does not seem to work:
If desired, the plugin can be used to dump contents of process memory.
vol.p… Continue reading How to dump the memory of a given process with Volatility 3?
I’m looking for a way to find images in all web browser cache folders. I can see a list of all images, and I can navigate folders. however, it is very time consuming if I have multiple data sources in one case. Also, additional tools requi… Continue reading How to easily browse through browser’s image cache using autopsy?
Is it possible to ‘view’ the space that TRIM would take care of to see if that space was really wiped? I am using both Windows and Linux.
I had some files that I want to recover from windows, but I formatted the ssd drive to macos (apfs)? Is there a tool or method to recover those files?
I have an old G975U(s10+) that has old data on it, that has since been deleted (i.e. whatsapp, voice, hangouts), and i can preview a small amount of it on the device itself but im afraid that if I connect it to the internet, the data will … Continue reading Best way to dump data from a G975U that i cant connect to the internet?
Having an Ubuntu server with current software, updated daily, every 5 days or so someone gains root access. I know that from log watch.
I search the logs for his ip and it doesn’t show up.
He is probably using a VPN as once it’s in china, … Continue reading How do you find an attacker if he immediately cleans after himself?
A client wants to track a specific employee’s browsing habits. Assuming that the employee knows how to clear their browser history, is there any way to recover the history so it can be read by BrowserHistoryView or some other software?
… Continue reading Can I view a user’s browser history if the history/cache has been cleared?