The tools of computer forensics|Orange County|Private Investigator

The tools of computer forensics|Orange County|Private Investigator

The tools of computer forensics

The tools and techniques employed in computer forensics are  as wide and varied because the crimes that are investigated. Every investigation can ultimately verify the tools that area unit used. Below is simply a short define of tools employed in the look for relevant evidentiary knowledge on a PC.

A number of pc rhetorical tools and approaches  used for the detection of suspicious knowledge on the disk drive. These is usually divided into file analysis and format specific approaches.

Commonly used computer rhetorical tools, like the Forensic Toolkit  and EnCase , offer samples of file analysis approaches. These tools used for storage media analysis of a spread of files and knowledge sorts in absolutely integrated environments. As an example, the Forensic Toolkit will perform tasks like file extraction, build a rhetorical image of knowledge on storage media, recover deleted files, verify knowledge sorts and text extraction. case is wide used inside enforcement and like FTK provides a strong interface to the disk drive or knowledge supply underneath scrutiny, as an example, by providing a file manager that shows extant and deleted files.

Format specific approaches specifically seek for knowledge happiness to specific applications or knowledge sorts. As an example, Jhead is an application to extract specific JPEG image knowledge, like time and date an image was taken, camera build and model, image resolution, shutter speed, etc. Tools like Data Lifter are ready to extract files of a large number of sorts. These tools support knowledge carving to retrieve files of specific sorts by looking out the disk for file preambles.

The predominant internet browsers in use nowadays are Microsoft’s web mortal (IE) and also the
Firefox/ Mozilla/ web browser family. Every of those browsers saves, in their own distinctive formats,
the internet browsing activity (also called web browsing history) of the various users who have
accounts on a machine. That is stores the browsing history of a user within the index.dat file and also the Firefox/ Mozilla/ web browser family browsers save the online activity in an exceedingly file named history.dat.
These 2 files area unit hidden files. So, so as to look at them, the browser ought to be setup to indicate both hidden files and system files. One cannot simply delete these 2 files in any regular means.
There is conjointly no proof that deleting these files has sped up the browsing expertise of the users.
Web forensics deals with gathering vital data associated with a criminal offense by exploring the
browsing history of an individual, the quantity of times a web site has been visited, the length of
each visit, the files that are uploaded and downloaded from the visited web site, the
cookies setup as a part of the visit and different vital data.
Mandiant internet scholarly person [6] assists users in reviewing electronic computer URLs that area unit hold on within the history files of the foremost unremarkably used internet browsers. The tool permits the rhetorical examiner to determine what, when, where, and the way the intruders looked into the various sites. Web
Historian is wont to break down a selected history file or recursively search through a given folder
or drive and notice all the browser history files that the tool is aware of a way to break down. internet scholarly person generates one report (that is saved in numerous file formats) containing the web activity from all of the browser history files it’s ready to find.

The post The tools of computer forensics|Orange County|Private Investigator appeared first on Blue Systems International.