Tag Archives: Symantec connect

Explore Ghost .

  In this Virtualization world anything is possible. We most of the times work on Virtualization software’s and Ghost images, to image and clone the Hard disks. Why to work double time when we can reduce our work load by … Continue reading

Posted in Forensics | Tagged , , , | Leave a comment

Articles related to Forensics

Hi friends, Here is some of the interesting Forensics articles, More coming soon Linux live forensics http://www.symantec.com/connect/articles/forensic-analysis-live-linux-system-pt-1 http://www.symantec.com/connect/articles/forensic-analysis-live-linux-system-pt-2 Analysis of Stuxnet using System internals http://blogs.technet.com/b/markrussinovich/archive/2011/03/30/3416253.aspx http://blogs.technet.com/b/markrussinovich/archive/2011/04/20/3422035.aspx http://blogs.technet.com/b/markrussinovich/archive/2011/05/10/3422212.aspx Stuxnet’s Footprint in Memory with Volatility 2.0 http://mnin.blogspot.com/2011/06/examining-stuxnets-footprint-in-memory.html Prefetch files at Face Value … Continue reading

Posted in Forensics | Tagged , , , , , , , , | Leave a comment