Pieces0310

取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

公告

2015年7月26日 #

Can Live View boot up images acquired from 64bit OS evidence?

摘要： Some said Live View could only boot up images acquired from 32bit OS evidence. I have to say that it's not true. Ok, the best way to prove it is let t... 阅读全文

posted @ 2015-07-26 16:12 Pieces0310 阅读(459) 评论(0) 推荐(0)