Pieces0310

取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

首页 新随笔 联系 订阅 管理

Belkasoft Evidence Center makes me very impressed that it supports lots of evidence type. I have to admit that it’s one of the most powerful forensic tools I’ve ever seen. Now I’d like to add an physical image acquired from an Android phone.

 

 

 

Let’s take a look at what BEC has found.

 

Wifi

 

Pictures

 

Geolocations

 

Documents

 

By the way, BEC supports lots of popular chat Apps far beyond your imagination. You know that it would take lots of effort if you do forensic on those Apps manually.

 

posted on 2016-07-02 14:31  Pieces0310  阅读(441)  评论(0)    收藏  举报