archives

forensicsrichard

forensicsrichard has written 2 posts for Forensic Focus – Articles

Generating computer forensic supertimelines under Linux: A comprehensive guide for Windows-based disk images

When the authors first published this paper, their intentions were to develop a comprehensive guide to digital forensic timelines in order to consolidate the many fragmented sources of information concerning this topic.  What they discovered, however, was that quality references were often challenging to find among various books, papers, periodicals, filesystem specifications and source code. … Continue reading

An in-depth analysis of the cold boot attack: Can it be used for sound forensic memory acquisition?

Abstract The purpose of this technical memorandum is to examine the technical characteristics behind the cold boot attack technique and to understand when and how this technique should be applied to the field of computer forensic investigations. Upon thorough examination of the technique, the authors highlight its advantages, drawbacks, applicability and appropriateness for use in … Continue reading

Follow

Get every new post delivered to your Inbox.

Join 692 other followers