Pieces0310

取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

首页 新随笔 联系 订阅 管理

2015年10月18日 #

摘要: Let me show you the WeChat version first. It is 6.3.What will happen to WeChat deleted chat messages? Take a look at "Blocks containing deleted data" ... 阅读全文
posted @ 2015-10-18 22:48 Pieces0310 阅读(720) 评论(3) 推荐(0)

2015年10月12日 #

摘要: Forensic is a strict science and we should let the evidence speak for itself.Several months ago I still could recovered Line deleted chat messages as ... 阅读全文
posted @ 2015-10-12 22:55 Pieces0310 阅读(1240) 评论(0) 推荐(0)

2015年10月6日 #

摘要: When examining an Android phone, we have to overcome some barriers first so that we could extract data from it without fail. Usually the scenario is t... 阅读全文
posted @ 2015-10-06 22:36 Pieces0310 阅读(494) 评论(0) 推荐(0)

2015年9月26日 #

摘要: IP-Box could crack 4 digit passcode, what about 6 digit passcode??? All you need to do is to upgrade your iOS to iOS9, and you could use 6 digit passc... 阅读全文
posted @ 2015-09-26 16:59 Pieces0310 阅读(479) 评论(0) 推荐(0)

2015年9月25日 #

摘要: A suspect sent a threatening letter in Naver Line App to Richman, and said that he wanted those money wired to a specified account "3398-239775-07". R... 阅读全文
posted @ 2015-09-25 15:00 Pieces0310 阅读(355) 评论(0) 推荐(0)

2015年9月22日 #

摘要: A friend of mine asked me help him to examine his Android 5.0 smartphone. He did not say what's wrong with his phone, and he just wonder why his wife ... 阅读全文
posted @ 2015-09-22 22:55 Pieces0310 阅读(654) 评论(0) 推荐(0)

2015年9月20日 #

摘要: Everybody knows that https is http over SSL, and https is a secure way for protecting confidential data like bank account/password ,etc. Now I'd to sh... 阅读全文
posted @ 2015-09-20 16:47 Pieces0310 阅读(441) 评论(0) 推荐(0)

2015年9月7日 #

摘要: A friend of mine said to me that she could fool those forensic tools easily by changing writing direction in text. I said to her: "Really? Are you sur... 阅读全文
posted @ 2015-09-07 22:51 Pieces0310 阅读(581) 评论(0) 推荐(0)

2015年8月30日 #

摘要: Some of my friends ask me a question: "Does FTK index search support regular expression?" They just participated in FTK Bootcamp last month, and they'... 阅读全文
posted @ 2015-08-30 19:47 Pieces0310 阅读(947) 评论(0) 推荐(0)

2015年8月27日 #

摘要: Line is getting more and more popular in recent years. Lots of peope use Line, so do "Suspects". That's why we have to keep an eye on it if any new fe... 阅读全文
posted @ 2015-08-27 11:53 Pieces0310 阅读(421) 评论(0) 推荐(0)