Forensics

Introduction

Related Tools

• Stegnography
  • Steghide Website
  • Pelock Online Tool
  • Aperisolve Online Tool
  • Strings(CLI tool)
  • Exiftool GitHub
  • binwalk (CLI tool) GitHub
  • stegonline-check bit planes for hidden data Website
  • fotoforensics Online Tool
  • olevba for extracting vba from windows document GitHub
• Network protocol analysis
  • Wireshark Website GitHub
• Disk image analysis
  • FTK Imager Website
  • The Sleuth Kit (TSK) Website GitHub
  • Autospy (GUI version) Website GitHub
• Memory analysis
  • Volatility, supports Windows, MacOS and Linux memory dumps Website GitHub
• QR code recovery
  • Bruteforce Website

Key Concepts

• Linux memory commands
  • mmls: displays the layout of the partitions in a volume system
  • fls: list file and directory names in a disk image
  • icat: output the contents of a file based on its inode number

.