Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While …
FACT – A Tool To Collect, Process And Visualise Forensic Data From Clusters Of Machines Running In The Cloud Or On-Premise
FACT is a tool to collect, process and visualise forensic data from clusters of machines running in the cloud or …
CSIRT-Collect – PowerShell Script To Collect Memory And (Triage) Disk Forensics
A PowerShell script to collect memory and (triage) disk forensics for incident response investigations. The script leverages a network share, …
Radare2 – UNIX-like Reverse Engineering Framework And Command-Line Toolset
r2 is a rewrite from scratch of radare. It provies a set of libraries, tools and plugins to ease reverse …
FAMA – Forensic Analysis For Mobile Apps
LabCIF – Forensic Analysis for Mobile Apps Getting Started Android extraction and analysis framework with an integrated Autopsy Module. Dump …
Live Forensics Analysis with Computer Volatile Memory
Forensics Analysis The field of computer Forensics Analysis involves identifying, extracting, documenting, and preserving information that is stored or transmitted …
Pdgmail Forensic Tool to Analysis Process Memory Dump
Pdgmail Forensic tool to analysis process memory dump for Gmail data. It will discover what it can out of the memory …
WINSpect-Powershell based Windows Security Auditing Toolbox
WINSpect is the PowerShell based windows auditing tool to enumerate and identify security weaknesses with windows platform and results of this audit can …
USB Forensics – Reconstruction of Digital Evidence from USB Drive
Digitial Forensics analysis of USB forensics include preservation, collection, Validation,Identification, Analysis, Interpretation, Documentation, and Presentation of digital evidence derived from …
Tracking Photo’s Geo-location with GPS EXIF DATA – Forensic Analysis
This article is about collecting metadata from photographs. Metadata is an information which is created for every file’s format. Examples for …