Computer forensics works to analyze information on computer systems in an attempt to find evidence regarding certain actions to achieve certain goals.

learn more… | top users | synonyms

2
votes
2answers
80 views

Mount Iphone for Forensic Analysis

How do I mount my iphone to look at it's files forensically? I have FTK Imager (the only free program I could find) and it doesnt mount it. I am looking to get the cell tower logs (Cells.plist) file ...
2
votes
1answer
50 views

How To Find Out What Software is Trying to 'Phone Home'?

I have seen some suspicious outbound communications blocked on my VPS, which hosts a small experimental Web site, and am wanting to find out which application is making the attempt. The server is ...
1
vote
0answers
104 views

An attacker got a few 128bit TrueCrypt keys from a RAM analysis. What can he do?

I'm trying to simulate a possible attack scenario for my studies. I've got a image, which has a encrypted disk, encrypted by TrueCrypt (confirmed). TrueCrypt is installed on the image itself too. ...
1
vote
0answers
144 views

Linux Physical memory analysis using hexeditor for Forensics

I am about to forensics investigation of a linux physical memory. I have dumped an ARM Linux which the profile is not listed in Volatility, so I could find the process and the latest command using ...
1
vote
0answers
236 views

Forensic analysis of Android sqlite db's

In an extraction of com.facebook.katana/Database db files (fb.db and webview.db), I get: [fb.db] If I use an hexadecimal editor to open those files, even when there is no sqlite record named c_user, ...