Forensics - scan guest OS (WinXP) and files from host OS (Win7 64) using VMWare Player or VirtualBox
I have a Windows XP laptop that was infected with a virus; the virus was removed but network connectivity was jacked up. I boot to Ubuntu from a USB key to move files between the system and the ...
I was reading the Wikileaks FAQ (archived here), it says: Many CD and DVD writers will include the serial number of the DVD or CD writer onto the CD/DVDs they write. If the post is ...
What is the best way to undelete some photos on Linux? Is there any way to use foremost to only recover files that only contain some text?
I accidentaly deleted some digital photos I had recently taken, and I wanted to undelete them. I found out about Foremost, and it allows me to recover jpg files, but will fo that with all of the ...
I am looking for an application I used in 2001. It was a curses application that displayed devices or files in hexadecimal format, and allowed searching through them and other functionality. I can't ...
I have a 100GB NTFS-formatted drive, and a 250GB external USb disk. I am thinking of using a live disk, as is described here, except that I will skip the gzip part. ...
Is it possible to determine whether a CD was burned by a particular CD/DVD burner? Is there any identifier of that burner that is always written to any disc it burns? This is something I'd like to ...
I'd like to learn more about forensic analysis, and I'm trying to do the challenges from Project Honeynet. I need to check the logfiles and find the IP's that connected remotely to the computer. I ...