Skip to main content

Posts

Showing posts with the label so

Linux Kodachi3 un SO seguro anti forense anónimo y fácil de usar

Linux Kodachi3 un SO seguro anti forense anónimo y fácil de usar Linux Kodachi es un sistema operativo basado en Debian 8.6 con un escritorio ligero XFCE que pretende ser lo m�s seguro, anti-forense y an�nimo posible, siendo a la vez muy f�cil de usar. Todo lo que hay que hacer es arrancarlo mediante una unidad externa (dispositivo USB, tarjeta SD o CD/DVD) y tendremos un sistema operativo funcionando con conexi�n VPN + conexi�n Tor y servicio DNScrypt. En principio no requiere ninguna configuraci�n o conocimiento de Linux. El sistema operativo se carga en RAM por lo que una vez que se apague el PC no se dejar� ning�n rastro eliminado todas las actividades del usuario. Es libre bajo licencia Apache License 2.0 y de c�digo abierto y sus caracter�sticas principales son: - VPN, Tor y DNScrypt. - Truecrypt � keepass � Secure cloud y mucho m�s - Generador de direcciones MAC aleatorias - RAM Wiping en el reinicio/apagado - Navegador Tor - Pidigin Messenger - Carteras Bitcoin y Litecoin - Opc...

Xmount When Changing the Evidence isnt so Bad

Xmount When Changing the Evidence isnt so Bad "Do no harm" is the modern translation of the Hippocratic Oath which is applied to physicians. But it has application in data forensics as well. It takes shape in the edicts that require write-blocking be used during the acquisition of data sources and analysis to be done on copies rather than original data. (I’ll leave the very valid discussion about triage through direct examination of data sources aside for another time. We’re talking general principles here.) Can we ever change the evidence? The short answer is, "No." We should never change the original data, period. But that doesn’t mean that we can’t render a copy of the data readable. After all, it is better to read the data with the programs intended to use the data… that way we know we are rendering the information as it was intended to be read. And if there is a way to repair a file or file system in a manner that doesn’t change the substantive ...