Collaborate Disseminate
Let’s say someone has a full disk encrypted laptop powered on when the adversary tries to break into her home to seize her laptop. If she simply put her powered-on laptop into a fish tank nearby, would it be effective against forensic inve… Continue reading Is throwing powered on laptop into a fish tank effective against forensic [closed]
My class question:
"What are the key challenges for cloud forensics on cloud storage such
as Dropbox?"
With what I’ve been told and what I generally understand, the question is basically what difficulties a digital investigator… Continue reading What are the challenges when doing forensics on cloud storage services?
I have taken a DFIR course, but I have not worked with an SME. Looking at this SuperTimeline output, I saw something like what is pictured. SVCHOST executing from prefetch and the file then being deleted. The other instance is modificatio… Continue reading Log analysis of suspicious activity [closed]
From a forensics standpoint, is there any technical possibility that WITHOUT rooting the device the potential cybercriminal used a manipulated system phone app to have hidden functionalities like secret messaging, which he had modified via… Continue reading As long as an Android device does not get rooted, is it safe to assume that the main phone app has not been modified?
The Intercept has a long article on the insecurity of photo cropping:
One of the hazards lies in the fact that, for some of the programs, downstream crop reversals are possible for viewers or readers of the document, not just the file’s creators or editors. Official instruction manuals, help pages, and promotional materials may mention that cropping is reversible, but this documentation at times fails to note that these operations are reversible by any viewers of a given image or document.
[…]
Uncropped versions of images can be preserved not just in Office apps, but also in a file’s own metadata. A photograph taken with a modern digital camera contains all types of metadata. Many image files record text-based metadata such as the camera make and model or the GPS coordinates at which the image was captured. Some photos also include binary data such as a thumbnail version of the original photo that may persist in the file’s metadata even after the photo has been edited in an image editor…
Police forensics is already plagued by human biases. Experts say AI will make it even worse. Continue reading Developers Created AI to Generate Police Sketches. Experts Are Horrified
Police forensics is already plagued by human biases. Experts say AI will make it even worse. Continue reading Developers Created AI to Generate Police Sketches. Experts Are Horrified
I am experiencing some issues when using mmls command after having created an image with dcfldd/guymager in some particular situations. Usually this approach seems to be working fine to create physical images of devices, but with some USBs… Continue reading MMLS (Sleuth Kit) not working in some situations
Situation:
Let’s say, I am about to develop a website based on known means of its creation, which would be the luggage of HTML + JS/TS/PHP + CSS wrapped in some framework, e.g. Angular, React, Laravel, or whatever. For completeness let’s a… Continue reading Reducing web browser artifacts from a web developers perspective
In the eighth episode of the second series of Mr. Robot, Trenton
does this to the video that was recorded by a VHS camera before releasing it to the public via Vimeo.
ffmpeg -i fuxFBI.mp4 -map 0 -map_metadata 0:s:0 -c copy fuxFBI.mp4
From … Continue reading What might one want to accomplish by running ffmpeg -i video.mp4 -map 0 -map_metadata 0:s:0 -c copy video.mp4 in terms of forensics?