John Ritchie

I'm a Sr. Security Analyst for the State of Oregon with the following certifications: CISSP, GCFA, GCIH, GREM. I work for the Oregon CISO and perform information security incident response, computer forensics and vulnerability assessments.
John Ritchie has written 1 posts for Forensic Focus – Articles

Firefox Cache Format and Extraction

Introduction In the forensic lab where I work, we frequently investigate malware-infected workstations.  As our user population started shifting from Internet Explorer to Firefox, we observed that one of our favorite forensic tools, Kristinn Gudjonsson’s log2timeline, wasn’t able to provide as much data for Firefox as it was for IE.  The missing component was cache … Continue reading

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

Join 1,290 other followers