October 4th, 2011 by lhaas                              

Nokia to turn mobile landscape on its head with ‘Meltemi’ smartphone OS

While Nokia maintains that “Windows Phone is our smartphone platform of choice,” they appear to be pursuing plans for going after the low-end market with a Linux-based OS.

Nokia is again developing a proprietary smartphone operating system after announcing this past February that it would abandon both Symbian and MeeGo in favor of [...]

August 22nd, 2011 by lhaas                              

Mobile forensics training sessions offered by viaForensics

FOR IMMEDIATE RELEASE

Contact: Andrew Hoog Chief Investigative Officer viaForensics Phone: +1 312-878-1100 http://viaforensics.com/contact-us

Mobile forensics training sessions offered by viaForensics

viaForensics will hold five mobile forensics training sessions in Mississauga, Ontario, this October.

Chicago, August 22, 2011 – viaForensics will hold five mobile forensics training sessions covering Linux use in forensics, iPhone [...]

March 17th, 2011 by lhaas                              

Open-Source Vulnerabilities Paint A Target On Android – Darkreading

“The openness of the Android operating system and the fact that it is based on Linux means that a large cadre of operating-system hackers can attempt to find vulnerabilities in the system.”

In 2009, Red Hat, SuSE, and other Linux distributors fixed a major flaw that could have allowed any user to escalate [...]

October 28th, 2010 by ahoog                              

Fixed The Sleuth Kit on Windows Server 2003

For some time now, I (and others) have had problems running The Sleuth Kit (TSK) on Windows Server 2003…in particular, I could not get fls to run.  Here’s a post I made to the sleuth-kit list from January 2010 with some follow up discussions:

http://old.nabble.com/problems-running-sleuthkit-on-Windows-Server-2003-x64-td27189560.html

If you try to run it from the [...]

February 10th, 2010 by ahoog                               1 comment

HOWTO install log2timeline on Ubuntu 9.10

Kristinn Gudjonsson has written an excellent timeline utility for forensics investigators call log2timeline. The power of his tool is that it will add a wide range of event inline to an existing body file so that when you are doing timeline analysis (a key component to any forensic investigation) you can see file [...]

February 25th, 2009 by ahoog                               2 comments

HOWTO maximize RAID0 performance on Linux forensic workstation - Part 1

Introduction

As everyone knows, disk I/O performance is significant factor in how quickly and efficiently a forensic analyst can perform their duties.  Often times, people try to through hardware at a performance issue and hope it “just works” out of the box.  While there can be an increase in performance by simply buying [...]

January 12th, 2009 by ahoog                              

HOWTO: mount filesystem in Linux so all users can browse

In Linux, file systems are generally mounted by root unless non-root users are given permission in the /etc/fstab file. If you are performing an analysis and need to mount a raw file system (dd image) for review, you can issue the following command as root:

mount -t ntfs -o ro,loop,show_sys_files,offset=32256,umask=222 /cases/case-sense-net/tag1/tag1-img.dd /cases/fs-readonly

The [...]

January 2nd, 2009 by ahoog                              

How to compile xpwn on Debian Etch

While performing forensic testing on an 3G iPhone using the techniques outlined by Jonathan Zdziarski in his book “iPhone Forensics“, I discovered the xpwn tool (by planetbeing) pre-compiled for OS X was not up to date (missing many of the firmware bundles which contain the encryption key and initialization vectors to uncompress the [...]