Pieces0310

2016年9月25日 #

摘要： The evidence is a VM as below. The flat vmdk is the real disk, and the vmdk only 1kb is just a descriptor. As you could see that there is no vmx. What 阅读全文

posted @ 2016-09-25 11:05 Pieces0310 阅读(300) 评论(0) 推荐(0)

2016年9月24日 #

how to monitor system logs and export to files simultaneously

摘要： What will you do when you conduct a malware analysis on a smartphone? You will focus on running processes or services, and also you'll capture memory 阅读全文

posted @ 2016-09-24 15:32 Pieces0310 阅读(328) 评论(0) 推荐(0)

2016年9月11日 #

Device Path in WinPrefetchView

摘要： As we know that the Prefetch file is used for optimizing the loading time of the application in the next time that you run it. So we could know whethe 阅读全文

posted @ 2016-09-11 22:40 Pieces0310 阅读(402) 评论(0) 推荐(0)

2016年9月4日 #

Analyze network packet files very carefully

摘要： As a professional forensic guy, you can not be too careful to anlyze the evidence. Especially when the case is about malware or hacker. Protect your w 阅读全文

posted @ 2016-09-04 11:09 Pieces0310 阅读(360) 评论(0) 推荐(0)

2016年9月2日 #

APK Downgrade Method working fine on LINE latest version 6.7.1

摘要： Line is one of the most popular messaging Apps, especially in Asia. On March 3 I downgraded the app LINE to an earlier version and extract the databas 阅读全文

posted @ 2016-09-02 17:19 Pieces0310 阅读(731) 评论(0) 推荐(0)

2016年8月31日 #

Extract QQ from iPhone and analyze it

摘要： QQ is one of the most popular chat App in the world. Now let me show you how to extract QQ from iPhone and analyze it. The version of iOS is 9.3.2 and 阅读全文

posted @ 2016-08-31 10:09 Pieces0310 阅读(372) 评论(0) 推荐(0)

2016年8月30日 #

The Magic only works with total devotion of one's heart

摘要： The Magic only works with total devotion of one's heart All tools and equipments are useless without passions. 阅读全文

posted @ 2016-08-30 22:36 Pieces0310 阅读(246) 评论(0) 推荐(1)

2016年8月28日 #

Dig out deleted chat messages of App Skype

摘要： Last month Candy was arrested on suspicion of having doing online porn webcam shows, but Candy refused to confess to her crime. The Police extracted d 阅读全文

posted @ 2016-08-28 21:26 Pieces0310 阅读(776) 评论(2) 推荐(0)

2016年8月20日 #

Search history in "Maps"

摘要： A friend of mine came to me with her iPhone yesterday. She wanted to know how to clear search history in App “Maps”. She showed me the search history 阅读全文

posted @ 2016-08-20 16:30 Pieces0310 阅读(227) 评论(0) 推荐(0)

2016年8月13日 #

如何对具有端点加密功能的LINE进行取证

摘要： LINE又有新动作了,这回默认即启用了端点加密功能,强调确保传输过程的安全,且让我们来看看如何对付新版的LINE. 有启用Letter Sealing就会在昵称前多个锁头的图像. 这手机据犯嫌供称,落网前有刻意删除所有LINE的聊天对话,…废话不多说,咱们取出数据库来看看里头有些什么吧~ 提醒各位, 阅读全文

posted @ 2016-08-13 09:12 Pieces0310 阅读(786) 评论(0) 推荐(0)

公告