Field Forensic

Add a Comment

Comment by Eques de Ventus Occasus on August 3, 2009 at 12:29am

Ok, It has been a while since our forum here has been active, but I see several new faces have joined our ranks. First welcome to everyone, and thank you for joining. Second, I would be interested in seeing how many of you live in places that require you to have a private investigator's license to perform Computer forensics freelance. In Florida, it is a requirement. As if we want to go around taking pictures through hotel room windows. There needs to be an actual accrediation for computer forensics specialists, and stop grouping us with PI's.

Comment by Scorpio on June 9, 2008 at 8:22am

Are there any Forensic Professionals from Australia in here?

Comment by Eques de Ventus Occasus on May 23, 2008 at 7:50pm

Personally in the free Forensic Toolkits, I prefer BackTrack. What I recommend is creating a bootable flash memory stick 4 GB or higher, load Backtrack on it first, then load several others on as well. You need to do some manual tweaking of the configuration files, but it provides you with quick access to a greater variety of tools. Always load a copy of DSL into your tool kit. It is not a traditional Forensic Distro, but it runs on a wider variety of of older systems than many other distros, and if you do not mind a bit of manual coding, can usually get the job done just as well.

Helix is okay but I am not a big fan of it.

As far as checking for stenographic insertions, I am un aware of any, however NSRL Knoppix provides a listing of file headers for almost all known software types, and if you were looking for items created by a specific software, you could write something to do what you need. Aside from that I cannot help you.

Comment by Scorpio on May 20, 2008 at 7:09am

Is there a tool that will bulk check files for stenographic insertions.

Comment by Scorpio on May 14, 2008 at 11:51am

I'm new to the forensic side of computing, but have 20 yrs experience with programming, systems analysis & networking. I recently registered for a degree course in Digital Forensics, and would like to discuss many issues & topics. This is a relatively new field in South Africa, and very few resources exist.

Comment by Eques de Ventus Occasus on May 12, 2008 at 12:25pm

The first question to ask everyone here is what is your background? What tools do you usually use, and what is your specific area of expertise? (No problem if you do not have one, just if you do, and are willing to help others, then great).