Forensicswiki.org has moved to this site, forensicswiki.xyz. For information, please join the Google Group forensicswiki-reborn

Difference between revisions of "Main Page"

From Forensics Wiki
Jump to navigation Jump to search
imported>Showkiller
(18 intermediate revisions by 8 users not shown)
Line 1: Line 1:
 
<div style="margin-top:0.5em; padding:0.5em 0.5em 0.5em 0.5em; background-color:#faf0ff; align:right; border:1px solid #ddccff;">
 
<div style="margin-top:0.5em; padding:0.5em 0.5em 0.5em 0.5em; background-color:#faf0ff; align:right; border:1px solid #ddccff;">
 
This is the '''Forensics Wiki''', a [http://creativecommons.org/licenses/by-sa/2.5/ Creative Commons]-licensed [http://en.wikipedia.org/wiki/Wiki wiki] devoted to information about [[digital forensics]] (also known as computer forensics). We currently list a total of [[Special:Allpages|{{NUMBEROFARTICLES}}]] pages.
 
This is the '''Forensics Wiki''', a [http://creativecommons.org/licenses/by-sa/2.5/ Creative Commons]-licensed [http://en.wikipedia.org/wiki/Wiki wiki] devoted to information about [[digital forensics]] (also known as computer forensics). We currently list a total of [[Special:Allpages|{{NUMBEROFARTICLES}}]] pages.
−
 
+
 
 
Much of [[computer forensics]] is focused on the [[tools]] and [[techniques]] used by [[investigator]]s, but there are also a number of important [[papers]], [[people]], and [[organizations]] involved. Many of those organizations sponsor [[Upcoming_events|conferences]] throughout the year and around the world. You may also wish to examine the popular [[journals]] and some special [[reports]].
 
Much of [[computer forensics]] is focused on the [[tools]] and [[techniques]] used by [[investigator]]s, but there are also a number of important [[papers]], [[people]], and [[organizations]] involved. Many of those organizations sponsor [[Upcoming_events|conferences]] throughout the year and around the world. You may also wish to examine the popular [[journals]] and some special [[reports]].
−
</div>
+
</div>
  
  
 
==WIKI NEWS==
 
==WIKI NEWS==
−
2015-08-26: – A support email address (support AT forensicswiki.org) was created for all your forensicswiki needs.  This is a mailing list that goes to the appropriate staff that will assist with site maintenance, issues, etc.  If you have questions or issues with the site please send us an email.
+
'''2019-12-15''': Forensic Wiki has restored by Simson Garfinkel at https://forensicswiki.xyz/ after it was abandoned by the company that acquired it.  
−
 
 
−
'''2015-07-18''': Forensic Wiki has been acquired by Harris Corporation for the betterment of the community.  All licensing and data rights are staying the same, there’s just corporate funding behind the site now.  The wiki will remain as an international resource, with no editorial input from Harris whatsoever.  All of the existing editorial controls and checks and balances will remain in place.  All of the existing accounts carry forward.
 
−
 
 
−
2014-06-14: The Wiki has been migrated to the most up-to-date MediaWiki and moved from HostGator to Pair. The previous bugs with the AccountCreation problem should be fixed. Please let us know if there are any problems.
 
−
* 2014-06-16 - It seems that the transfer and upgrade has resulted in some content being lost. The content appears to be on the old site and we may need some help in migrating it. Please see [[Content Lost in Migration]] for a list of the lost content.
 
  
 
2013-05-15: You can now subscribe to Forensics Wiki Recent Changes with the [[ForensicsWiki FeedBurner Feed]]
 
2013-05-15: You can now subscribe to Forensics Wiki Recent Changes with the [[ForensicsWiki FeedBurner Feed]]
Line 19: Line 14:
 
|-
 
|-
 
| width="60%" style="vertical-align:top" |
 
| width="60%" style="vertical-align:top" |
−
<!-- Selected Forensics Research -->  
+
<!-- Selected Forensics Research -->
 
<div style="margin-top:0.5em; border:2px solid #ff0000; padding:0.5em 0.5em 0.5em 0.5em; background-color:#ffff99; align:center; border:1px solid #ddccff;">
 
<div style="margin-top:0.5em; border:2px solid #ff0000; padding:0.5em 0.5em 0.5em 0.5em; background-color:#ffff99; align:center; border:1px solid #ddccff;">
−
<h2 style="margin:0; background-color:#ffff33; font-size:120%; font-weight:bold; border:1px solid #afa3bf; text-align:left; color:#000; padding-left:0.4em; padding-top:0.2em; padding-bottom:0.2em;"> Featured Forensic Research </h2>
+
<h2 style="margin:0; background-color:#ffff33; font-size:120%; font-weight:bold; border:1px solid #afa3bf; text-align:left; color:#000; padding-left:0.4em; padding-top:0.2em; padding-bottom:0.2em;"> Featured Forensic Challenge </h2>
  
−
<small>May 2014</small>
+
;[[Digital_Forensic_Research_Workshop|Digital Forensic Research Workshop]]
−
<bibtex>
 
−
@inproceedings{Hurley:2013:MAC:2488388.2488444,
 
−
author = {Sven Ka ̈lber, Andreas Dewald, Steffen Idler},
 
−
title = {Forensic Zero-Knowledge Event Reconstruction on Filesystem Metadata},
 
−
booktitle = {Lecture Notes in Informatics},
 
−
volume="P-228",
 
−
year=2014,
 
−
url = {http://subs.emis.de/LNI/Proceedings/Proceedings228/331.pdf},
 
−
}
 
−
</bibtex>
 
  
−
Abstract: Criminal investigations today can hardly be imagined without the forensic analysis of digital devices, regardless of whether it is a desktop computer, a mobile phone, or a navigation system. This not only holds true for cases of cybercrime, but also for traditional delicts such as murder or blackmail, and also private corporate investigations rely on digital forensics. This leads to an increasing number of cases with an ever-growing amount of data, that exceeds the capacity of the forensic experts. To support investigators to work more efficiently, we introduce a novel approach to automatically reconstruct events that previously occurred on the examined system and to provide a quick overview to the investigator as a starting point for further investigation. In contrast to the few existing approaches, our solution does not rely on any previously profiled system behavior or knowledge about specific applications, log files, or file formats. We further present a prototype implementation of our so-called zero knowledge event reconstruction approach, that solely tries to make sense of characteristic structures in file system metadata such as file- and folder-names and timestamps.
+
The current Digital Forensic Research Workshop (DFRWS) is about the Internet of Things (IoT). Analysis of devices and network data including a Smart TV Raspberry Pi and Amazon Echo cloud data are part of the scenario.
  
−
(See also [[Past Selected Articles]])
+
See more about [[Digital_Forensic_Research_Workshop|DFRWS here...]]
 +
(See also [[Past Selected Articles|Past Selected Research]])
  
 
| width="40%" style="vertical-align:top" |
 
| width="40%" style="vertical-align:top" |
Line 43: Line 29:
 
<div style="margin-top:0.5em; border:2px solid #00ff00; padding:0.5em 0.5em 0.5em 0.5em; background-color:#ffeeff; align:center; border:1px solid #ffccff;">
 
<div style="margin-top:0.5em; border:2px solid #00ff00; padding:0.5em 0.5em 0.5em 0.5em; background-color:#ffeeff; align:center; border:1px solid #ffccff;">
 
<h2 style="margin:0; background-color:#ffff33; font-size:120%; font-weight:bold; border:1px solid #afa3bf; text-align:left; color:#000; padding-left:0.4em; padding-top:0.2em; padding-bottom:0.2em;">  Featured Article </h2>
 
<h2 style="margin:0; background-color:#ffff33; font-size:120%; font-weight:bold; border:1px solid #afa3bf; text-align:left; color:#000; padding-left:0.4em; padding-top:0.2em; padding-bottom:0.2em;">  Featured Article </h2>
−
;[[Forensic Linux Live CD issues]]
+
;[[Apple File System (APFS)]]
−
:Forensic Linux Live CD distributions are widely used during computer forensic investigations. Currently, many vendors of such Live CD distributions state that their Linux do not modify the contents of hard drives or employ "write protection." Testing indicates that this may not always be the case. [[Forensic Linux Live CD issues|Read More...]]
+
: APFS, or Apple File System, is the file system designed by Apple Computer to supersede HFS+ and take advantage of flash/SSD storage and native encryption support. APFS also introduced file system snapshots, support for sparse files, and greater time stamp granularity.
 +
[[Apple File System (APFS)|Read More...]]
  
 
|}
 
|}
−
 
  
 
<!-- This begins the two-column section -->
 
<!-- This begins the two-column section -->
Line 98: Line 84:
 
* '''[[Tools:Network_Forensics|Network Forensics]]''': [[Snort]],  [[Wireshark]], [[Kismet]],  [[NetworkMiner]]...
 
* '''[[Tools:Network_Forensics|Network Forensics]]''': [[Snort]],  [[Wireshark]], [[Kismet]],  [[NetworkMiner]]...
 
* '''[[:Category:Anti-forensics tools|Anti-Forensics]]''': [[Slacker]], [[Timestomp]], [[wipe]], [[shred]], ...
 
* '''[[:Category:Anti-forensics tools|Anti-Forensics]]''': [[Slacker]], [[Timestomp]], [[wipe]], [[shred]], ...
−
* '''[[Tools#Other_Tools|Other Tools]]''': [[biew]], [[hexdump]], ...
+
* '''[[Tools#Other_Tools|Other Tools]]''': [[biew]], [[hexdump]], [[MailXaminer]]...
 
</div>
 
</div>
  
Line 117: Line 103:
  
 
</div>
 
</div>
−
 
+
 
  
 
|}
 
|}
Line 123: Line 109:
 
<div style="margin-top:0.5em; padding:0.5em 0.5em 0.5em 0.5em; background-color:#faf0ff; align:right; border:1px solid #ddccff;">
 
<div style="margin-top:0.5em; padding:0.5em 0.5em 0.5em 0.5em; background-color:#faf0ff; align:right; border:1px solid #ddccff;">
 
'''You can help!'''  We have a list of [[:Category:Articles_that_need_to_be_expanded|articles that need to be expanded]]. If you know anything about any of these topics, please feel free to chip in.
 
'''You can help!'''  We have a list of [[:Category:Articles_that_need_to_be_expanded|articles that need to be expanded]]. If you know anything about any of these topics, please feel free to chip in.
−
</div>  
+
</div>
−
+
 
  
  
  
 
__NOTOC__
 
__NOTOC__

Revision as of 09:26, 15 December 2019

This is the Forensics Wiki, a Creative Commons-licensed wiki devoted to information about digital forensics (also known as computer forensics). We currently list a total of 10 pages.

Much of computer forensics is focused on the tools and techniques used by investigators, but there are also a number of important papers, people, and organizations involved. Many of those organizations sponsor conferences throughout the year and around the world. You may also wish to examine the popular journals and some special reports.


WIKI NEWS

2019-12-15: Forensic Wiki has restored by Simson Garfinkel at https://forensicswiki.xyz/ after it was abandoned by the company that acquired it.

2013-05-15: You can now subscribe to Forensics Wiki Recent Changes with the ForensicsWiki FeedBurner Feed

Featured Forensic Challenge

Digital Forensic Research Workshop

The current Digital Forensic Research Workshop (DFRWS) is about the Internet of Things (IoT). Analysis of devices and network data including a Smart TV Raspberry Pi and Amazon Echo cloud data are part of the scenario.

See more about DFRWS here... (See also Past Selected Research)

Featured Article

Apple File System (APFS)
APFS, or Apple File System, is the file system designed by Apple Computer to supersede HFS+ and take advantage of flash/SSD storage and native encryption support. APFS also introduced file system snapshots, support for sparse files, and greater time stamp granularity.
Read More...


Topics


You can help! We have a list of articles that need to be expanded. If you know anything about any of these topics, please feel free to chip in.



Retrieved from "https://forensicswiki.xyz/wiki/index.php?title=Main_Page&oldid=17758"