Browsing the "Forensics" Tag

Network Forensic Analysis of SSL MITM Attacks

April 12th, 2011 | by NJ Ouchn

Source: Netresec The big news this past week has been the attack against Comodo where false certificates were created for [&hellip

Honeypot New Tool Streams v0.1.0 released

April 12th, 2011 | by NJ Ouchn

streams is a tool for browsing, mining and processing TCP streams in pcap files. It provides a command line prompt [&hellip

DDLDUMP Log Analysis v0.1 beta

March 29th, 2011 | by NJ Ouchn

DDLDUMP parses an Oracle redo log (transaction file) and dumps all DDL statements, such as  GRANT, CREATE, ALTER, DROP, REVOKE, [&hellip

V3RITY Data Block Examiner for Oracle

March 29th, 2011 | by NJ Ouchn

V3RITY Data Block Examiner for Oracle is a tool that can be used in an Oracle forensics investigation of a [&hellip

Focus on PlainSight the Open Source Computer Forensics

March 23rd, 2011 | by NJ Ouchn

PlainSight is a versatile computer forensics environment that allows inexperienced forensic practitioners perform common tasks using powerful open source tools. [&hellip

Process Hacker v2.13 available

March 21st, 2011 | by NJ Ouchn

Process Hacker is a feature-packed tool for manipulating processes and services on your computer. Process Hacker is a free and [&hellip

DFF (Digital Forensics Framework) v1.0.0 released

March 19th, 2011 | by NJ Ouchn

DFF (Digital Forensics Framework) is a simple but powerfull open source tool with a flexible module system which will help [&hellip

Malware Analyzer v2.9 just Released

March 14th, 2011 | by NJ Ouchn

Malware Analyzer is an open source tool for analyzing malwares. Features 1. String based analysis for registry , API calls [&hellip

The Sleuth Kit v3.2.1 Released

March 11th, 2011 | by NJ Ouchn

The Sleuth Kit is a C library and collection of command line file and volume system forensic analysis tools. The [&hellip

Mobius Forensic Toolkit v0.5.7 released

March 3rd, 2011 | by NJ Ouchn

Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface [&hellip