Pieces0310

取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

联系 订阅 管理
  132 Posts :: 0 Stories :: 64 Comments :: 0 Trackbacks

My friend John acquired a memory dump from Windows 10, but he could analyze this memory dump with any tools in hand. He was frustrated and thought maybe he should use another acquiring tool. Actually it's not acquiring tool's fault. All he need is a tool support analying windows 10 memory dump.

 

Now Responder Pro 3.1.3 could identify and analyze Win 10 memory dump well as below.

 

 

You guys could request a 30day trial from Counter Track as below link and you will know how it works.

https://shop.countertack.com/trial/?hsCtaTracking=01ff0f39-5c07-41d0-822e-022838330935%7Ca8ad1293-187d-46e1-a1a2-6ec020139e8a

 

posted on 2017-10-23 22:00 Pieces0310 阅读(...) 评论(...) 编辑 收藏