导航

05 2013 档案

[DFNews] EnCE认证变化，v6认证及相关课程即将取消

摘要：根据来自美国GuidanceSoftware的消息，在电子取证行业具有一定影响力的EnCase认证调查员（EnCase Certified Examiner，EnCE）近期将进行变化：自2013年5月31日起，GSI官方及授权培训伙伴停止提供EnCE v6 prep课程，EnCE v7 Prep不受影响。自2013年5月31日起，GSI不再接受EnCE v6的考试认证申请，仅提供EnCE v7版本考试。在接下来的EnCE考试中，Phase II部分的案例动手练习将不再采用从美国寄送加密狗及证据文件的方式，考试版EnCase的授权将采用证书文件方式，同时证据文件将采用下载。 阅读全文

posted @ 2013-05-23 22:24 YiDiscovery 阅读(834) 评论(0) 推荐(0)

[DFNews] GSI发布EnCase v7.07

摘要：What's New in Version 7.07Evidence Processor performance scalingBookmarking Case Analyzer dataMac OS X email message supportMac OS X Artifact ParserLinEn support featuresSorting tags within a columnPII Credit Card Pattern enhancementApple iOS 6 supportEvidence Processor Performance ScalingThe Ev 阅读全文

posted @ 2013-05-06 17:50 YiDiscovery 阅读(380) 评论(0) 推荐(0)

[计算机取证] JumpLists file names and AppID calculator

摘要：原文跳转：http://www.hexacorn.com/blog/2013/04/30/jumplists-file-names-and-appid-calculator/JumpList files are an interesting forensic artifact and as such they have been thoroughly explored by many researchers over last 2-3 years. There is really a lot of material out there and there are also many tools 阅读全文

posted @ 2013-05-05 17:44 YiDiscovery 阅读(522) 评论(0) 推荐(0)

[DFNews] eDEC发布“狼蛛”2.0手机取证系统

摘要：EDEC Digital Forensics has released a beta of its latest version of the company’s Tarantula Chinese Cell Phone Analysis Tool. Tarantula 2.0 beta is a significant advance.“In an industry where technology advances at the speed of light, it is our responsibility to provide investigators with the most a 阅读全文

posted @ 2013-05-05 17:41 YiDiscovery 阅读(663) 评论(0) 推荐(0)