Informatica forense. Mobile Forensics - Approfondimenti tecnici e particolarità degli smartphone

Size: px
Start display at page:

Download "Informatica forense. Mobile Forensics - Approfondimenti tecnici e particolarità degli smartphone"

Transcription

1 Informatica forense Mobile Forensics - Approfondimenti tecnici e particolarità degli smartphone A cura di Matteo Brunati Udine, 11 maggio 2015

2 Me, Myself & I IT Security consultant Design & development of IT Security solutions IT Security consultancy: EH, Computer Forensics, Crypto Currencies, etc. Business Innovation R&D Seminars, courses Certifications: ISACA CISA (almost...) Pubblications: lcfe ( ), OISSG ISSAF (<2006), Bachelor Thesis (ICME'10) Scout and Judo, from time to time... ;) 2

3 Digital Evidence: Examples s Documents Documents meta-data: EXIF, documents author/date/..., PDFs informations,... Internet browser history SIM card Memory: RAM, HDD, SSD,... GPS tracks Media files (video, audio, images) Aircrafts Black Box... 6

4 Forensics Acquisition Identify the device to acquire: photos, hardware infos (IMEI, brand, serial #, etc.) Try to leave the device in the power state it's found If turned off: 1) Remove battery 2) Remove SIM card 3) Remove SD Card If turned on: Isolate it Phone isolation: airplane mode (modify phone state), faraday cage, tinfoil, jammer Use Write Blocker whenever possible: 1) Hardware 2) Software Acquire device date and time 10

5 Hardware Tools: Faraday Bag/Box 11

6 Hardware Tools: Write Blocker 12

7 Hardware Tools: Jammer 13

8 Mobile Device Components Device informations: Hardware SIM card: SIM cloning, SIM Acquisition Flash card: custom hardware/software Logic File system Physical Mass storage: usual DF techniques Cloud: depends... 14

9 Software Tools: Proprietary Cellbrite UFED Micro Systemation XRY Oxygen Forensics MOBILEdit ViaForensics: Android, soon ios Katana Forensics Lantern: ios 15

10 Software Tools: Open Source Logical acquisition (your Linux machine, Santoku) ios: libidevicebackup (for enc. bkps ElcomSoft Password Recovery Bundle) Android: adb, AFLogical OSE External mass storage: dd, dcfldd, Guymager Physical acquisition: Android Forensics, Physical Techniques RIP 16

11 Software Tools: Open Source (cont'd) There is no does everything tool Image analysis: ios: libidevicebackup, ipba2 Extrenal mass storage: Autopsy Carving: foremost, scalpel, ks, Photorec, Bulk Extractor, etc. Apps: skype, whatsapp (WhatsappXstract, Backup Text for Whats), viber ( Backup Text for Viber), AFLogical OSE 17

12 Carving Recovering data from disk the raw way ;) Doesn't care about partition types Doesn't care about deleted/existing files We just need that the file has been saved at least once on the file system Search for the file magic number [1], [2] Recover as much as possible of the file remainings 18

13 SSD nightmare The SSD physical and controller chips properties makes very hard and sometimes unpredictable to retrieve deleted data. Wear levelling TRIM But it is not always the case, it depends on :) Operating System type and version SSD drive File system type... 19

14 Android examples: broken screen How to access and Android devices with a broken screen? Emulating user inputs :) $ adb shell input keyevent 26 # power $ adb shell input text <PIN> && adb shell input keyevent 66 # input PIN and hit enter $ $ $ $ $ adb adb adb adb adb shell shell shell shell shell input input input input input keyevent keyevent keyevent keyevent keyevent # # # # # back settings down down enter ADB Shell Input Events, KeyEvent 20

15 Android examples: unlock device Android <= Original work: kosborn/p2p-adb GUI: x942/p2pgui raider-android-backup-tool by c0rnholio 21

16 Android examples: AFLogical OSE??? TextSecure ;) 22

17 Android examples: Whatsapp 23

18 Android/iOS example: Telegram (1/2) Photos shot from secure chat Android: saved system photo gallery Recovered with carving All chat messages Stored in clear text on the SQLite DB Retrievable from memory dump Deleted messages: Android: only from RAM dump ios: still in SQLite DB ios: Telegram Investigation Android: Telegram App Store Secret-Chat Messages in Plain-Text Database 24

19 Android/iOS example: Telegram (2/2) 25

20 Anti-forensics: Android Network traffic: Orbot + Orweb/Firefox Add-on, VPN SMS/Messages: TextSecure, ChatSecure, Telegram(*) Phone calls: RedPhone, Ostel Steganography: Pixelknot Cleaning: CCleaner... (*) Only the network traffic is cyphered 26

21 27

22 We are hiring 28

ACQUISITION AND ANALYSIS OF IOS DEVICES MATTIA EPIFANI SANS FORENSICS PRAGUE PRAGUE, 10 OCTOBER 2013

ACQUISITION AND ANALYSIS OF IOS DEVICES MATTIA EPIFANI SANS FORENSICS PRAGUE PRAGUE, 10 OCTOBER 2013 ACQUISITION AND ANALYSIS OF IOS DEVICES MATTIA EPIFANI SANS FORENSICS PRAGUE PRAGUE, 10 OCTOBER 2013 FORENSIC ACQUISITION.BEFORE STARTING When we are dealing with the forensics acquisition of an ios device

More information

What Happens When You Press that Button? Explaining Cellebrite UFED Data Extraction Processes

What Happens When You Press that Button? Explaining Cellebrite UFED Data Extraction Processes What Happens When You Press that Button? Explaining Cellebrite UFED Data Extraction Processes Table of Contents UFED Basics...3 Extraction Types...4 Logical extraction...5 Logical extractions of ios devices...5

More information

Mobile security, forensics & malware analysis with Santoku Linux. * Copyright 2013 viaforensics, LLC. Proprietary Information.

Mobile security, forensics & malware analysis with Santoku Linux. * Copyright 2013 viaforensics, LLC. Proprietary Information. Mobile security, forensics & malware analysis with Santoku Linux PRESENTER - ANDREW HOOG CEO/Co-founder of viaforensics Andrew is a published author, computer scientist, and mobile security & forensics

More information

Mobile memory dumps, MSAB and MPE+ Data collection Information recovery Analysis and interpretation of results

Mobile memory dumps, MSAB and MPE+ Data collection Information recovery Analysis and interpretation of results Mobile memory dumps, MSAB and MPE+ Data collection Information recovery Analysis and interpretation of results Physical Extraction Physical extraction involves either Removing chips from circuit board

More information

A Survey on Mobile Forensic for Android Smartphones

A Survey on Mobile Forensic for Android Smartphones IOSR Journal of Computer Engineering (IOSR-JCE) e-issn: 2278-0661,p-ISSN: 2278-8727, Volume 17, Issue 2, Ver. 1 (Mar Apr. 2015), PP 15-19 www.iosrjournals.org A Survey on Mobile Forensic for Android Smartphones

More information

Post-Mortem Memory Analysis of Cold-Booted Android Devices

Post-Mortem Memory Analysis of Cold-Booted Android Devices Post-Mortem Memory Analysis of Cold-Booted Android Devices Christian Hilgers Holger Macht Tilo Müller Michael Spreitzenbarth FAU Erlangen-Nuremberg Chair of Computer Science 1 Prof. Felix Freiling IMF

More information

Retrieving Internet chat history with the same ease as a squirrel cracks nuts

Retrieving Internet chat history with the same ease as a squirrel cracks nuts Retrieving Internet chat history with the same ease as a squirrel Yuri Gubanov CEO, Belkasoft http://belkasoft.com SANS Forensic Summit September 21, 2011 London, Great Britain What is Instant Messenger!

More information

Cellebrite UFED Physical Pro Cell Phone Extraction Guide

Cellebrite UFED Physical Pro Cell Phone Extraction Guide Cellebrite UFED Physical Pro Cell Phone Extraction Guide By Colby Lahaie Patrick Leahy Center for Digital Investigation Champlain College May 16, 2012 Table of Contents 1 Introduction... 2 1.1 Research

More information

RECOVERING DELETED DATA FROM FAT PARTITIONS WITHIN MOBILE PHONE HANDSETS USING TRADITIONAL IMAGING TECHNIQUES

RECOVERING DELETED DATA FROM FAT PARTITIONS WITHIN MOBILE PHONE HANDSETS USING TRADITIONAL IMAGING TECHNIQUES RECOVERING DELETED DATA FROM FAT PARTITIONS WITHIN MOBILE PHONE HANDSETS USING TRADITIONAL IMAGING TECHNIQUES KEVIN MANSELL CONTROL-F LTD. [email protected] DARREN LOLE & FIONA LITCHFIELD SERVICE

More information

The Incident Response Playbook for Android and ios

The Incident Response Playbook for Android and ios SESSION ID: AIR-W03R The Incident Response Playbook for Android and ios Andrew Hoog CEO and Co-founder NowSecure @ahoog42 @NowSecureMobile Andrew Hoog Author of three books Incident Response for Android

More information

Mobile Devices in Electronic Discovery

Mobile Devices in Electronic Discovery Mobile Devices in Electronic Discovery Mobile Devices in Electronic Discovery Abstract Once upon a time they were used to make phone calls; now they are our mobile offices. Mobile devices are a prolific

More information

Computer Forensics. Securing and Analysing Digital Information

Computer Forensics. Securing and Analysing Digital Information Computer Forensics Securing and Analysing Digital Information Aims What is a computer? Where is the evidence? Why is digital forensics important? Seizing evidence Encryption Hidden files and folders Live

More information

This guide describes features that are common to most models. Some features may not be available on your tablet.

This guide describes features that are common to most models. Some features may not be available on your tablet. User Guide Copyright 2013 Hewlett-Packard Development Company, L.P. Bluetooth is a trademark owned by its proprietor and used by Hewlett-Packard Company under license. Google, Android, AdWords, Gmail,

More information

Open Source Data Recovery

Open Source Data Recovery Open Source Data Recovery Options and Techniques CALUG MEETING October 2008 !! Disclaimer!! This presentation is not sponsored by any organization of the US Government I am here representing only myself

More information

Table of Contents. Introduction to MSAB Training Department... 01. Training Services Overview... 02. XRY Certification training...

Table of Contents. Introduction to MSAB Training Department... 01. Training Services Overview... 02. XRY Certification training... Training Courses Table of Contents Introduction to MSAB Training Department... 01 Training Services Overview... 02 XRY Certification training... 03 XRY Intermediate training... 04 Advanced Acquisition

More information

Retrieving Data from Apple ios Devices Using XRY

Retrieving Data from Apple ios Devices Using XRY Retrieving Data from Apple ios Devices Using XRY 175 Lakeside Ave, Room 300A Phone: (802)865-5744 Fax: (802)865-6446 http://www.lcdi.champlain.edu 12/ /2014 The following is a step-by-step walkthrough

More information

Case Study: Mobile Device Forensics in Texting and Driving Cases

Case Study: Mobile Device Forensics in Texting and Driving Cases Case Study: Mobile Device Forensics in Texting and Driving Cases Company Profile McCann Investigations is a full service private investigation firm providing complete case solutions by employing cutting-edge

More information

NEW RESEARCH DIRECTIONS IN THE AREA OF SMART PHONE FORENSIC ANALYSIS

NEW RESEARCH DIRECTIONS IN THE AREA OF SMART PHONE FORENSIC ANALYSIS NEW RESEARCH DIRECTIONS IN THE AREA OF SMART PHONE FORENSIC ANALYSIS Firdous Kausar Department of Computer Science, College of Computer and Information Sciences, Imam University, Riyadh, Saudi Arabia.

More information

Full version is >>> HERE <<<

Full version is >>> HERE <<< Full version is >>> HERE http://pdfo.org/sdrecovery/pdx/chsd10070/ Tags: micro sd card

More information

Smartphone Forensics Analysis: A Case Study

Smartphone Forensics Analysis: A Case Study Smartphone Forensics Analysis: A Case Study Mubarak Al-Hadadi and Ali AlShidhani Abstract Smartphone forensics is a sub-set of digital forensics, and refers to the investigation and acquisition of artefacts

More information

Into The Droid. Gaining Access to Android User Data DEF CON 20

Into The Droid. Gaining Access to Android User Data DEF CON 20 Into The Droid Gaining Access to Android User Data DEF CON 20 Introduction Why this talk is useful Defend access / gain access Device seizure, loss, border crossing, stop and search, espionage... The company

More information

Computer Forensic Tools. Stefan Hager

Computer Forensic Tools. Stefan Hager Computer Forensic Tools Stefan Hager Overview Important policies for computer forensic tools Typical Workflow for analyzing evidence Categories of Tools Demo SS 2007 Advanced Computer Networks 2 Important

More information

Discovering Computers

Discovering Computers Discovering Computers Technology in a World of Computers, Mobile Devices, and the Internet Chapter 9 Operating Systems Objectives Overview Define an operating system Describe the start-up process and shutdown

More information

Additional details >>> HERE <<<

Additional details >>> HERE <<< Additional details >>> HERE http://dbvir.com/sdrecovery/pdx/palo3415/

More information

NOKIA E52 PHONE TRACKING SOFTWARE

NOKIA E52 PHONE TRACKING SOFTWARE www.trackingplanet.com NOKIA E52 PHONE TRACKING SOFTWARE Installation of your mobile application via WAP (Nokia mobile device) Using WAP/WEB mobile internet browser (Nokia, Opera etc.), it is required

More information

NIST Mobile Forensics Workshop and Webcast. Mobile Device Forensics: A Z

NIST Mobile Forensics Workshop and Webcast. Mobile Device Forensics: A Z NIST Mobile Forensics Workshop and Webcast Mobile Device Forensics: A Z June 2014 Disclaimer: Certain commercial entities, equipment, or materials may be identified in this presentation. Such identification

More information

Cell Phone Forensics For Legal Professionals

Cell Phone Forensics For Legal Professionals 1 Cell Phone Forensics For Legal Professionals Lars E. Daniel, EnCE, ACE, AME, CTNS, SCE, SCCM, SCA Digital Forensics Examiner Cell Phone Acquisition and Examination Collection and Acquiring Cell Phones

More information

This guide describes features that are common to most models. Some features may not be available on your tablet.

This guide describes features that are common to most models. Some features may not be available on your tablet. User Guide Copyright 2014 Hewlett-Packard Development Company, L.P. Bluetooth is a trademark owned by its proprietor and used by Hewlett-Packard Company under license. SD Logo is a trademark of its proprietor.

More information

Discovery of Electronically Stored Information ECBA conference Tallinn October 2012

Discovery of Electronically Stored Information ECBA conference Tallinn October 2012 Discovery of Electronically Stored Information ECBA conference Tallinn October 2012 Jan Balatka, Deloitte Czech Republic, Analytic & Forensic Technology unit Agenda Introduction ediscovery investigation

More information

Acronis True Image 2015 REVIEWERS GUIDE

Acronis True Image 2015 REVIEWERS GUIDE Acronis True Image 2015 REVIEWERS GUIDE Table of Contents INTRODUCTION... 3 What is Acronis True Image 2015?... 3 System Requirements... 4 INSTALLATION... 5 Downloading and Installing Acronis True Image

More information

This guide describes features that are common to most models. Some features may not be available on your tablet.

This guide describes features that are common to most models. Some features may not be available on your tablet. User Guide Copyright 2013 Hewlett-Packard Development Company, L.P. Bluetooth is a trademark owned by its proprietor and used by Hewlett-Packard Company under license. Google is a trademark of Google Inc.

More information

Digital Forensics Lecture 3. Hard Disk Drive (HDD) Media Forensics

Digital Forensics Lecture 3. Hard Disk Drive (HDD) Media Forensics Digital Forensics Lecture 3 Hard Disk Drive (HDD) Media Forensics Current, Relevant Topics defendants should not use disk-cleaning utilities to wipe portions of their hard drives before turning them over

More information

Blackberry Forensics. Shafik G. Punja Cindy Murphy. SANS DFIR Summit 2014 Austin TX. June-9-14 Copyright QuByte Logic Ltd

Blackberry Forensics. Shafik G. Punja Cindy Murphy. SANS DFIR Summit 2014 Austin TX. June-9-14 Copyright QuByte Logic Ltd 1 Blackberry Forensics SANS DFIR Summit 2014 Austin TX Shafik G. Punja Cindy Murphy 2 SPEAKER BACKGROUND - Shafik G. Punja - Active duty LE, performing digital forensics since Nov 2003 - Instructor for

More information

System i and System p. Customer service, support, and troubleshooting

System i and System p. Customer service, support, and troubleshooting System i and System p Customer service, support, and troubleshooting System i and System p Customer service, support, and troubleshooting Note Before using this information and the product it supports,

More information

Uncovering the Covered Tracks: Finding What s Left Behind JAD SALIBA FOUNDER & CTO

Uncovering the Covered Tracks: Finding What s Left Behind JAD SALIBA FOUNDER & CTO Uncovering the Covered Tracks: Finding What s Left Behind JAD SALIBA FOUNDER & CTO Background Teenage geek - IT/Software industry Police officer for 7 years Worked in Tech Crime Unit Started JADsoftware

More information

Norton Mobile Privacy Notice

Norton Mobile Privacy Notice Effective: April 12, 2016 Symantec and the Norton brand have been entrusted by consumers around the world to protect their computing devices and most important digital assets. This Norton Mobile Privacy

More information

Key & Data Storage on Mobile Devices

Key & Data Storage on Mobile Devices Key & Data Storage on Mobile Devices Advanced Computer Networks 2015/2016 Johannes Feichtner [email protected] Outline Why is this topic so delicate? Keys & Key Management High-Level Cryptography

More information

ITU Session Four: Device Imaging And Analysis. Mounir Kamal Q-CERT

ITU Session Four: Device Imaging And Analysis. Mounir Kamal Q-CERT ITU Session Four: Device Imaging And Analysis Mounir Kamal Q-CERT 2 Applying Forensic Science to Computer Systems Like a Detective, the archaeologist searches for clues in order to discover and reconstruct

More information

Information Technologies and Fraud

Information Technologies and Fraud Information Technologies and Fraud Florin Gogoasa CISA, CFE, CGEIT, CRISC ACFE Romania - Founder and Board member Managing Partner Blue Lab Consulting Information Technologies for Fraud investigation A.

More information

A Short Introduction to Digital and File System Forensics

A Short Introduction to Digital and File System Forensics Antonio Barili Lab Dept. of Industrial and Information Engineering University of Pavia (Italy) [email protected] Every contact leaves a trace Culprit Scene Victim Edmond Locard (1877-1966) 2015 -

More information

Mobile App User's Guide

Mobile App User's Guide Mobile App User's Guide Copyright Statement Copyright Acronis International GmbH, 2002-2012. All rights reserved. "Acronis", "Acronis Compute with Confidence", "Acronis Recovery Manager", "Acronis Secure

More information

Hands-On How-To Computer Forensics Training

Hands-On How-To Computer Forensics Training j8fm6pmlnqq3ghdgoucsm/ach5zvkzett7guroaqtgzbz8+t+8d2w538ke3c7t 02jjdklhaMFCQHihQAECwMCAQIZAQAKCRDafWsAOnHzRmAeAJ9yABw8v2fGxaq skeu29sdxrpb25zidxpbmznogtheories...ofhilz9e1xthvqxbb0gknrc1ng OKLbRXF/j5jJQPxXaNUu/It1TQHSiyEumrHNsnn65aUMPnrbVOVJ8hV8NQvsUE

More information

Android Forensics: Simplifying Cell Phone Examinations

Android Forensics: Simplifying Cell Phone Examinations SMALL SCALE DIGITAL DEVICE FORENSICS JOURNAL VOL. 4, NO.1, SEPTEMBER 2010, ISSN# 1941-6164 1 Android Forensics: Simplifying Cell Phone Examinations Jeff Lessard Champlain College [email protected]

More information

More details >>> HERE <<<

More details >>> HERE <<< More details >>> HERE http://urlzz.org/remophowin/pdx/204t820/ Tags: remo recover photo (windows product

More information

HiDrive Intelligent online storage for private and business users.

HiDrive Intelligent online storage for private and business users. HiDrive Intelligent online storage for private and business users. Learn about our many product features! Contents 4 Everything, always and everywhere My file is your file Easy backup 5 Public folder Share

More information

MFR IT Technical Guides

MFR IT Technical Guides MFR IT Technical Guides Windows 7 Backup and Recovery Page 1 of 33 Table of Contents 1 Glossary... 3 2 Backup Strategy... 4 3 Windows Backup Options... 5 3.1 Windows Backup... 5 3.2 Windows System Image

More information

Case Study: Smart Phone Deleted Data Recovery

Case Study: Smart Phone Deleted Data Recovery Case Study: Smart Phone Deleted Data Recovery Company profile McCann Investigations is a full service private investigations firm providing complete case solutions by employing cutting-edge computer forensics

More information

Example of Standard API

Example of Standard API 16 Example of Standard API System Call Implementation Typically, a number associated with each system call System call interface maintains a table indexed according to these numbers The system call interface

More information

EnCase v7 Essential Training. Sherif Eldeeb https://eldeeb.net

EnCase v7 Essential Training. Sherif Eldeeb https://eldeeb.net هللامسب EnCase v7 Essential Training What s in this course Explore the most notable features of the new version. Everything you need to know about EnCase v7 to conduct basic investigations. Create Cases

More information

imail Frequently Asked Questions (FAQs) 27 July 2015 Version 2.2

imail Frequently Asked Questions (FAQs) 27 July 2015 Version 2.2 imail Frequently Asked Questions (FAQs) 27 July 2015 Version 2.2 Owner: Cynthia Tan IT Services Table of Contents GENERAL FAQS... 4 1. How to access to Sunway imail account?... 4 2. I can t login to my

More information

Digital Forensics Tutorials Acquiring an Image with FTK Imager

Digital Forensics Tutorials Acquiring an Image with FTK Imager Digital Forensics Tutorials Acquiring an Image with FTK Imager Explanation Section Digital Forensics Definition The use of scientifically derived and proven methods toward the preservation, collection,

More information

NAS 242 Using AiMaster on Your Mobile Devices

NAS 242 Using AiMaster on Your Mobile Devices NAS 242 Using AiMaster on Your Mobile Devices Learn to use AiMaster on your mobile devices A S U S T O R C O L L E G E COURSE OBJECTIVES Upon completion of this course you should be able to: 1. Use AiMaster

More information

2 Enterprise. CounThru TM. Managed Print Solution. CounThru TM 2 Enterprise Managed Print Solution WHITE PAPER. Introduction. What is CounThru TM

2 Enterprise. CounThru TM. Managed Print Solution. CounThru TM 2 Enterprise Managed Print Solution WHITE PAPER. Introduction. What is CounThru TM 2 Enterprise Managed Print Solution WHITE PAPER 2 Enterprise Managed Print Solution Introduction What is Printer Management? Printer management is the process of monitoring the status of a printer through

More information

Design and Implementation of Forensic System in Android Smart Phone

Design and Implementation of Forensic System in Android Smart Phone Design and Implementation of Forensic System in Android Smart Phone Xinfang Lee 1, Chunghuang Yang 1 2, Shihj en Chen, Jainshing Wu 2 1 Graduate Institute of Information and computer Education National

More information

CYBER FORENSICS. KRISHNA SASTRY PENDYALA Cyber Forensic Division Central Forensic Science Laboratory Hyderabad.

CYBER FORENSICS. KRISHNA SASTRY PENDYALA Cyber Forensic Division Central Forensic Science Laboratory Hyderabad. CYBER FORENSICS KRISHNA SASTRY PENDYALA Cyber Forensic Division Central Forensic Science Laboratory Hyderabad. 11 DIGITAL EVIDENCE? Cyber crimes Digital evidence Digital evidence is any information of

More information

ER-260. SmartPhone Recovery Pro TM. User Guide. Rev. 1.1. Android Data Recovery Software for Windows OS

ER-260. SmartPhone Recovery Pro TM. User Guide. Rev. 1.1. Android Data Recovery Software for Windows OS ER-260 SmartPhone Recovery Pro TM Android Data Recovery Software for Windows OS User Guide Rev. 1.1 Contents Page Introduction 1 System Requirements 2 Installation / Check for Updates 2 Features 3 Understanding

More information

Step by Step Guide for Upgrading Your NetCamPro Camera to Cloud Mode Using an Android Device

Step by Step Guide for Upgrading Your NetCamPro Camera to Cloud Mode Using an Android Device Step by Step Guide for Upgrading Your NetCamPro Camera to Cloud Mode Using an Android Device Table of Contents Introduction...2 Backing Out Cloud Mode...2 Indoor Camera Factory Reset...2 Outdoor Camera

More information

Formal Education: Professional Qualifications: Professional Awards: Membership/Networking:

Formal Education: Professional Qualifications: Professional Awards: Membership/Networking: Formal Education: (some) 2006: Indonesian Advanced Police College Award: The Best Graduate in Academic 2009: MSc in Forensic Informatics, University of Strathclyde, UK Final Result: Distinction for Dissertation

More information

introducing COMPUTER ANTI FORENSIC TECHNIQUES

introducing COMPUTER ANTI FORENSIC TECHNIQUES introducing COMPUTER ANTI FORENSIC TECHNIQUES COMPUTER FORENSIC DATA RECOVERY TECHNIQUES AND SOLUTIONS WORKSHOP Executive Summary Computer Forensics, a term that precisely identifies the discipline that

More information

Android Physical Extraction - FAQ

Android Physical Extraction - FAQ Android Physical Extraction - FAQ Nadav Horesh June, 2012 1 Table of Contents Introduction... 3 Android Debugging Bridge (ADB)... 4 Q: What does ADB stand for and how does it work?...4 Q: So can ADB be

More information

Developing Process for Mobile Device Forensics

Developing Process for Mobile Device Forensics Developing Process for Mobile Device Forensics Det. Cynthia A. Murphy Abstract With the growing demand for examination of cellular phones and other mobile devices, a need has also developed for the development

More information

Paraben s P2C 4.1. Release Notes

Paraben s P2C 4.1. Release Notes Paraben s P2C 4.1 Release Notes Welcome to Paraben s P2C 4.1! Paraben's P2C is a comprehensive digital forensic analysis tool designed to handle more data, more efficiently while keeping to Paraben's P2

More information

Industrial Flash Storage Trends in Software and Security

Industrial Flash Storage Trends in Software and Security January 22, 2013 Industrial Flash Storage Trends in Software and Security Many flash storage devices in embedded applications are used to save data but also function as disks for the OS. Most users are

More information

Hardware Information Managing your server, adapters, and devices ESCALA POWER5 REFERENCE 86 A1 00EW 00

Hardware Information Managing your server, adapters, and devices ESCALA POWER5 REFERENCE 86 A1 00EW 00 86 A1 00EW 00 86 A1 00EW 00 Table of Contents Managing your server, adapters, and devices...1 Managing your server using the Hardware Management Console...1 What's new...1 Printable PDFs...2 HMC concepts

More information

Advanced Registry Forensics with Registry Decoder. Dr. Vico Marziale Sleuth Kit and Open Source Digital Forensics Conference 2012 10/03/2012

Advanced Registry Forensics with Registry Decoder. Dr. Vico Marziale Sleuth Kit and Open Source Digital Forensics Conference 2012 10/03/2012 Advanced Registry Forensics with Registry Decoder Dr. Vico Marziale Sleuth Kit and Open Source Digital Forensics Conference 2012 10/03/2012 Who am I? Senior Security Researcher @ DFS Published Researcher

More information

CDR500 Spy Recovery Pro

CDR500 Spy Recovery Pro The CDR 500 Spy is the ultimate data recovery tool, which enables users to recover lost and deleted data from a variety of different sources using both Windows PC and Mac. By combining 4 of the most sophisticated,

More information

Kaseya 2. User Guide. Version 7.0. English

Kaseya 2. User Guide. Version 7.0. English Kaseya 2 Mobile Device Management User Guide Version 7.0 English September 3, 2014 Agreement The purchase and use of all Software and Services is subject to the Agreement as defined in Kaseya s Click-Accept

More information

Computer Forensics using Open Source Tools

Computer Forensics using Open Source Tools Computer Forensics using Open Source Tools COMP 5350/6350 Digital Forensics Professor: Dr. Anthony Skjellum TA: Ananya Ravipati Presenter: Rodrigo Sardinas Overview Use case explanation Useful Linux Commands

More information

WHITEPAPER. One Cloud For All Your Critical Business Applications. www.airvm.com

WHITEPAPER. One Cloud For All Your Critical Business Applications. www.airvm.com WHITEPAPER One Cloud For All Your Critical Business Applications. www.airvm.com Introduction AirVM Coud is a fully customizable IaaS cloud platform designed for SMBs and IT professionals who want to move

More information

Names of Parts. English. Mic. Record Button. Status Indicator Micro SD Card Slot Speaker Micro USB Port Strap Hook

Names of Parts. English. Mic. Record Button. Status Indicator Micro SD Card Slot Speaker Micro USB Port Strap Hook User Manual Names of Parts Record Button Mic Status Indicator Micro SD Card Slot Speaker Micro USB Port Strap Hook Video Mode Photo Mode Local Mode Cloud Mode Mode Button Power Button Tripod Mount Clip

More information

Android Security for Enterprise App Developers Jon Preedy

Android Security for Enterprise App Developers Jon Preedy Android Security for Enterprise App Developers Jon Preedy Sr. Sales Engineer Agenda for Lightning Talk Developer View Android Security Model Security and Enterprise-Scale Device Configuration Encryption

More information

Just EnCase. Presented By Larry Russell CalCPA State Technology Committee May 18, 2012

Just EnCase. Presented By Larry Russell CalCPA State Technology Committee May 18, 2012 Just EnCase Presented By Larry Russell CalCPA State Technology Committee May 18, 2012 What is e-discovery Electronically Stored Information (ESI) Discover or Monitor for Fraudulent Activity Tools used

More information

Guest Quick Guide PC and Mac Users Updated to version 3.5.8 March 2015

Guest Quick Guide PC and Mac Users Updated to version 3.5.8 March 2015 Guest Quick Guide PC and Mac Users Updated to version 3.5.8 March 2015 Table of Contents Welcome to imeet 3 Sign in and join a meeting (via the imeet desktop app) 4 Sign in and join a meeting (via a Web

More information

White Paper. Freeance Mobile for Cityworks

White Paper. Freeance Mobile for Cityworks White Paper Freeance Mobile for Cityworks Version 1.1 May 2012 Freeance Mobile for Cityworks Freeance Mobile for Cityworks 2012.1 is a mobile application for the following smartphones and tablets: iphone

More information

2 Getting started... 15 2.1 User interface language...15 2.2 Protecting your system...15

2 Getting started... 15 2.1 User interface language...15 2.2 Protecting your system...15 Table of contents 1 Introduction...6 1.1 What is Acronis True Image?... 6 1.2 Alternatives to the removed features... 6 1.3 System requirements and supported media... 7 1.3.1 Minimum system requirements...

More information

How To Do Digital Forensics

How To Do Digital Forensics Enterprise Risk Management Miami, FL Digital Forensics Risk Management and Information Systems Security Consulting Services January 2011 UMiami alumnus Bachelors: Information Systems and Marketing MS Computer

More information

User Manual 9.7 Tablet Android 4.0

User Manual 9.7 Tablet Android 4.0 User Manual 9.7 Tablet Android 4.0 1 Welcome...3 Important Notices...3 Keys and Functions...4 I. Getting Started...5 1.1 Turn on/off...5 1.1.1 Turn on...5 1.1.2 Turn off...5 1.2 Lock/unlock the screen

More information

Digital Photo Bank / Portable HDD Pan Ocean E350 User Manual

Digital Photo Bank / Portable HDD Pan Ocean E350 User Manual Digital Photo Bank / Portable HDD Pan Ocean E350 User Manual Installing a hard disk 1. Power off the unit. 2. Remove the bottom cover from the unit by removing four screws. 3. Insert the 2.5 HDD to the

More information

APP USER MANUAL. Trackunit Virtual Hardware. Status / Tracking / Map

APP USER MANUAL. Trackunit Virtual Hardware. Status / Tracking / Map APP USER MANUAL Trackunit Virtual Hardware Status / Tracking / Map Trackunit 2013 Table of Contents 1. Introduction... 2 Features... 2 Get started... 2 2. Status and tracking... 3 Network... 3 Account...

More information

Names of Parts. English 1. Mic. Record Button. Status Indicator Micro SD Card Slot Speaker Micro USB Port Strap Hook

Names of Parts. English 1. Mic. Record Button. Status Indicator Micro SD Card Slot Speaker Micro USB Port Strap Hook User Manual Names of Parts Record Button Mic Status Indicator Micro SD Card Slot Speaker Micro USB Port Strap Hook Video Mode Photo Mode Local Mode Cloud Mode Mode Button Power Button Tripod Mount Clip

More information

ELCE 2013 - Secure Embedded Linux Product (A Success Story)

ELCE 2013 - Secure Embedded Linux Product (A Success Story) ELCE 2013 - Secure Embedded Linux Product (A Success Story) Marcin Bis http://bis-linux.com [email protected] Edinburgh - 2013.10.25 1 / 31 About me Marcin Bis Entrepreneur Embedded Linux: system development,

More information

Università Degli Studi di Parma. Distributed Systems Group. Android Development. Lecture 1 Android SDK & Development Environment. Marco Picone - 2012

Università Degli Studi di Parma. Distributed Systems Group. Android Development. Lecture 1 Android SDK & Development Environment. Marco Picone - 2012 Android Development Lecture 1 Android SDK & Development Environment Università Degli Studi di Parma Lecture Summary - 2 The Android Platform Android Environment Setup SDK Eclipse & ADT SDK Manager Android

More information

Forensic analysis of iphone backups

Forensic analysis of iphone backups Forensic analysis of iphone backups The goal of iphone Backup Forensics analysis is extracting data and artefacts from the itunes backups without altering any information. iphone forensics can be performed

More information

CompTIA Mobile App Security+ Certification Exam (ios Edition) Live exam IOS-001 Beta Exam IO1-001

CompTIA Mobile App Security+ Certification Exam (ios Edition) Live exam IOS-001 Beta Exam IO1-001 CompTIA Mobile App Security+ Certification Exam (ios Edition) Live exam IOS-001 Beta Exam IO1-001 INTRODUCTION This exam will certify that the successful candidate has the knowledge and skills required

More information

COS 318: Operating Systems

COS 318: Operating Systems COS 318: Operating Systems File Performance and Reliability Andy Bavier Computer Science Department Princeton University http://www.cs.princeton.edu/courses/archive/fall10/cos318/ Topics File buffer cache

More information

Honor T1 8.0 FAQ. Issue 01. Date 06/30

Honor T1 8.0 FAQ. Issue 01. Date 06/30 Honor T1 8.0 FAQ Issue 01 Date 06/30 1 System and update... 1-1 1.1 Why does my Honor T1 8.0 constantly crash?... 1-1 1.2 Will data be erased if I update my Honor T1 8.0?... 1-1 1.3 Why can't I power

More information