Collaborate Disseminate
I am experiencing some issues when using mmls command after having created an image with dcfldd/guymager in some particular situations. Usually this approach seems to be working fine to create physical images of devices, but with some USBs… Continue reading MMLS (Sleuth Kit) not working in some situations
Situation:
Let’s say, I am about to develop a website based on known means of its creation, which would be the luggage of HTML + JS/TS/PHP + CSS wrapped in some framework, e.g. Angular, React, Laravel, or whatever. For completeness let’s a… Continue reading Reducing web browser artifacts from a web developers perspective
In the eighth episode of the second series of Mr. Robot, Trenton
does this to the video that was recorded by a VHS camera before releasing it to the public via Vimeo.
ffmpeg -i fuxFBI.mp4 -map 0 -map_metadata 0:s:0 -c copy fuxFBI.mp4
From … Continue reading What might one want to accomplish by running ffmpeg -i video.mp4 -map 0 -map_metadata 0:s:0 -c copy video.mp4 in terms of forensics?
I have a question regarding bitlocker. Suppose I have any operating system installed on an unencrypted disk (windows for example) and I have confidential data on it. Then, someone formats the disk and installs windows, but this time encryp… Continue reading Does Bitlocker securely erase the blocks where the first and last partition will go?
Can Cuckoo extract PE files from a memory dump or record the import table of the running process? I need to record the import table in PE not the called/executed API from the process.
There is Process-Dump which is able to extract PE from … Continue reading Cuckoo dump a PE file from a memory dump?
I want to image a drive with FTK Imager’s feature ‘Create Disk Image’ but the external hard drive has some issues. The external HDD does not appear in Windows File Explorer but it appears in Disk Management as Online and Unallocated. The d… Continue reading Creating disk image with FTK Imager: Failure: The specified network resource or device is no longer available. (55)
I have trouble with some questions related to digital forensics, but I cannot find the exact correct answer from any source on the Internet. Please anyone who now the answer exactly can help me?
Continue reading What’s the answers of these questions on digital forensics [closed]
People with long commutes usually come up with tricks to stay focused and alert and avoid the dangerous tendency to zone out during the drive. One trick I used to …read more Continue reading Books You Should Read: Why Buildings Fall Down
I want to make a VMWare (VMWare is first preference but any alternative can be used as well) virtual machine completely digital forensics-proof. I am protecting against someone getting physical access to my computer when I am not there (I … Continue reading How to make a virtual machine forensics-proof – completely or to the maximum possible level?
In their 2018 paper "Solid state drive forensics: Where do we stand?", Vieyra et al. discuss recovering deleted data from SSDs.
For their experiments, they wrote large amounts of text to twelve SSDs, then shift-deleted the files,… Continue reading Reasons for recovering small amounts of deleted data from SSDs