Home / Blog / Archives for Android Forensics
 October 4th, 2011 by lhaas
While Nokia maintains that “Windows Phone is our smartphone platform of choice,” they appear to be pursuing plans for going after the low-end market with a Linux-based OS.
Nokia is again developing a proprietary smartphone operating system after announcing this past February that it would abandon both Symbian and MeeGo in favor of [...]
 August 22nd, 2011 by lhaas
FOR IMMEDIATE RELEASE
Contact: Andrew Hoog Chief Investigative Officer viaForensics Phone: +1 312-878-1100 http://viaforensics.com/contact-us
Mobile forensics training sessions offered by viaForensics
viaForensics will hold five mobile forensics training sessions in Mississauga, Ontario, this October.
Chicago, August 22, 2011 – viaForensics will hold five mobile forensics training sessions covering Linux use in forensics, iPhone [...]
 March 17th, 2011 by lhaas
“The openness of the Android operating system and the fact that it is based on Linux means that a large cadre of operating-system hackers can attempt to find vulnerabilities in the system.”
In 2009, Red Hat, SuSE, and other Linux distributors fixed a major flaw that could have allowed any user to escalate [...]
 October 28th, 2010 by ahoog
For some time now, I (and others) have had problems running The Sleuth Kit (TSK) on Windows Server 2003…in particular, I could not get fls to run. Here’s a post I made to the sleuth-kit list from January 2010 with some follow up discussions:
http://old.nabble.com/problems-running-sleuthkit-on-Windows-Server-2003-x64-td27189560.html
If you try to run it from the [...]
 February 10th, 2010 by ahoog
Kristinn Gudjonsson has written an excellent timeline utility for forensics investigators call log2timeline. The power of his tool is that it will add a wide range of event inline to an existing body file so that when you are doing timeline analysis (a key component to any forensic investigation) you can see file [...]
 February 25th, 2009 by ahoog
Introduction
As everyone knows, disk I/O performance is significant factor in how quickly and efficiently a forensic analyst can perform their duties. Often times, people try to through hardware at a performance issue and hope it “just works” out of the box. While there can be an increase in performance by simply buying [...]
 January 12th, 2009 by ahoog
In Linux, file systems are generally mounted by root unless non-root users are given permission in the /etc/fstab file. If you are performing an analysis and need to mount a raw file system (dd image) for review, you can issue the following command as root:
mount -t ntfs -o ro,loop,show_sys_files,offset=32256,umask=222 /cases/case-sense-net/tag1/tag1-img.dd /cases/fs-readonly
The [...]
 January 2nd, 2009 by ahoog
While performing forensic testing on an 3G iPhone using the techniques outlined by Jonathan Zdziarski in his book “iPhone Forensics“, I discovered the xpwn tool (by planetbeing) pre-compiled for OS X was not up to date (missing many of the firmware bundles which contain the encryption key and initialization vectors to uncompress the [...]
|
|