Tag Archives: Symantec connect

Explore Ghost .

Posted on October 29, 2011 by babloo

  In this Virtualization world anything is possible. We most of the times work on Virtualization software’s and Ghost images, to image and clone the Hard disks. Why to work double time when we can reduce our work load by … Continue reading →

Posted in Forensics | Tagged , , , | Leave a comment

Articles related to Forensics

Posted on August 3, 2011 by babloo

Hi friends, Here is some of the interesting Forensics articles, More coming soon Linux live forensics http://www.symantec.com/connect/articles/forensic-analysis-live-linux-system-pt-1 http://www.symantec.com/connect/articles/forensic-analysis-live-linux-system-pt-2 Analysis of Stuxnet using System internals http://blogs.technet.com/b/markrussinovich/archive/2011/03/30/3416253.aspx http://blogs.technet.com/b/markrussinovich/archive/2011/04/20/3422035.aspx http://blogs.technet.com/b/markrussinovich/archive/2011/05/10/3422212.aspx Stuxnet’s Footprint in Memory with Volatility 2.0 http://mnin.blogspot.com/2011/06/examining-stuxnets-footprint-in-memory.html Prefetch files at Face Value … Continue reading →

Posted in Forensics | Tagged , , , , , , , , | Leave a comment