Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [forensics]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
10 views

Hash comparison tool or script

I need to see if there is a tool out there that can help me with a project I am working on. I have a remote set of files that we have imported a few TBs, the remote site has sent me a text file that ...
0
votes
0answers
8 views

Alternate Data Stream in Linux

does anyone know any tools that can list the ADS (Alternate Data Streams) of files for LINUX!? I know that this is something specific for NTFS systems (correct me if I'm wrong), I need this tool for ...
1
vote
0answers
25 views

Lock screen when unauthorized USB device plugged into Windows

I read an article about how Ross Ulbrich get caught. Basically the FBI put an unauthorized USB that keeps his computer working. This is how they got a lot of evidences against Ulbrich. There is a ...
2
votes
0answers
22 views

Linux software to detect external drive partition-level rootkits

clamscan can search file systems for malware, but it can't scan possible rootkits on the boot sectors of an external disk. rkhunter also doesn't seem to provide the ability to scan boot sectors of an ...
1
vote
0answers
29 views

Command line tool for file and registry monitoring

I would like to capture the files and registry changes etc during application installation through command line. Please help me to get such tools. Actually there are lot of tools available for this ...
1
vote
0answers
12 views

Recover file from a file

There are tools to recover files from broken hard disks, USB sticks or SD cards. I have an OLE file that was extracted from a Word document. That OLE file seems to contain a video. I'm looking for a ...
0
votes
3answers
108 views

Need software to recover a NTFS partition from drive with corrupted partition table

I have a 4tb drive which had a formatted NTFS 3.9tb partition and several small partitions. The GUID Partition Table (GPT) main and backup partition tables were then re-written so the partitions were '...
4
votes
1answer
57 views

Imaging free space only

When doing data forensics, sometimes you need just the free space of a filesystem, to run further analysis/heuristic processing on. Is there any tool that allows just imaging the free space? Anything ...
3
votes
1answer
73 views

Free computer forensic software for Windows

I am looking for a free computer forensics software like Guidance Encase. The software must collect data / capture disk images (> 2 TB) open dd-style files process the collected data especially ...
1
vote
1answer
34 views

File format identification

Does anyone know software for File format identification? I don't mean identification by file extension but by analyzing the byte stream. I would be interested in an open-source platform on which to ...
-1
votes
2answers
54 views

tool for passive device forensics

Not sure if there is a tool out there but I basically would like to find a piece of software or multiple pieces of software that I could install on all my hosts within a network, for example my office ...
5
votes
3answers
129 views

Program to list all differences between two Windows PCs

My remote customer experiences a bug that I can't manage to reproduce, even after setting up a machine identical in all points (I think) to my customer's machine. Is there a program that me and my ...
4
votes
1answer
143 views

Find and extract JPG images if found from the RAW file

I have a tons of files restored from the broken HDD it actually dump data files and I can see a lot of Exif .JPG headers inside of these files that contains images I had before. My question is: I am ...
4
votes
1answer
374 views

Computer Forensic Timeline Tool for live system

I am troubleshooting PCs and many times I'd like to find out what a user did before the PC or programs of the PC stopped working. The tool should at least collect information from: Add/remove ...
2
votes
0answers
128 views

Program to determine when a disc (CD) has been written/burned

I am looking for a program that can: determine the date and time when a disc has been written/burned If possible: works on Windows 7 free also works with DVDs I am aware of How to find out when a ...