Technology Everysecond » digital forensics http://mnunioni.org seabloggers INC Wed, 14 Jul 2010 03:30:23 +0000 en hourly 1 Digital Forensics – How Hackers hide Data in Computers http://mnunioni.org/2009/10/05/digital-forensics-%e2%80%93-how-hackers-hide-data-in-computers/ http://mnunioni.org/2009/10/05/digital-forensics-%e2%80%93-how-hackers-hide-data-in-computers/#comments Mon, 05 Oct 2009 15:33:16 +0000 admin http://mnunioni.org/?p=765 Basics of Digital Forensics

The rate of cyber crime is increasing in our country. A latest survey reveals that over Rs 3500 million is lost annually due to white collar crime, which includes cyber crime. When law enforcement agencies investigate cyber crimes, they use digital forensics, which involves investigation of computer systems to unearth evidence against cyber criminals. Many new investigative methods that use the latest scientific developments and new software are becoming popular in this field. When cyber crime occur, they naturally involve the computer and hackers, who usually leave some evidence or tracks on the system.

Popular Techniques to Hide Data

Generally cyber criminals conceal data on the hard drive. There are two popular techniques to hide data on the hard drive, one by low-level formatting and the other by partitioning. With low-level formatting hackers prefer redundant sectors and bad sectors. While partitioning data can be hidden in the inner-partition gaps, unallocated spaces, hidden partitions, boot records, partition tables and deleted partitions. To fully understand this we should know the details of the Windows file system or other popular file system.

]]> http://mnunioni.org/2009/10/05/digital-forensics-%e2%80%93-how-hackers-hide-data-in-computers/feed/ 0 Software for Forensics http://mnunioni.org/2009/10/05/software-for-forensics/ http://mnunioni.org/2009/10/05/software-for-forensics/#comments Mon, 05 Oct 2009 15:32:32 +0000 admin http://mnunioni.org/?p=763 Investigators need software tools for file viewing, disk imaging, uncompressing files, identifying known files, performing string searches and accessing file metadata. WinHex software (www.x-ways.net) is used for making hard disk images, viewing files and recovering deleted files. ProDiscover (www.techpathways.com) is a forensic software which is used for disk imaging and file signature analysis to recover deleted files. This software is suitable for analysis of FAT, NTFS and Sun Solaris UFS. It also displays ADS streams in the file system. Encase is another popular tool used in the forensic field. This software safely previews a virtual boot disk image using VMW are to allow a first hand view of the system.

You can use SafeBack, Ghost, Mareware, FTK softwares for disk imaging. Process explorer, Auto Runs, WireShark, MD5Sum, EventCombMT are other free software tools for digital forensic purposes. These software tools will help you in protecting your system and empower you to watch out for hackers data on your computer.

]]> http://mnunioni.org/2009/10/05/software-for-forensics/feed/ 0