±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 35980
New Yesterday: 5 Visitors: 364

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 37 matches

Re: M.2 drives and CRU Forensic Ultradock v5

Post Posted: Sep 10, 19 07:53

[quote="fraudit"]Ufff, many thanks for the detailed explanation, jaclaz, I really appreciate it!

I believe now I've got it. Clearly next time I will do my best to find matching controllers / standa ...
raydenvm
Topic: M.2 drives and CRU Forensic Ultradock v5
Replies: 14
Views: 1808
 

Re: NVMe - filling it up with random data (ISO 17025)

Post Posted: May 18, 19 06:00

[quote="trewmte"]
This thread did make me wonder about NVM wiping and reminded me of comments by Bruce Nikkel in his book 'Practical Forensic Imaging - Securing Digital Evidence with Linux Tools (201 ...
raydenvm
Topic: NVMe - filling it up with random data (ISO 17025)
Replies: 9
Views: 2195
 

Re: NVMe - filling it up with random data (ISO 17025)

Post Posted: May 17, 19 08:41

Alas, dd with /dev/random has two downsides.

1. It's a time-taker to wipe a drive completely.

2. More importantly, modern QLC drives will wear-out due to low endurance. Some low-end models can ...
raydenvm
Topic: NVMe - filling it up with random data (ISO 17025)
Replies: 9
Views: 2195
 

Re: SHA-1 question

Post Posted: Feb 22, 19 08:34

Or you could use [url=https://gchq.github.io/CyberChef/]CyberChef playing with recipe if you prefer to run conversion in UI.

Recipe from Base32 to HEX:

[{"op":"From Base32","args":["A-Z2-7=",tr ...
raydenvm
Topic: SHA-1 question
Replies: 4
Views: 842
 

Re: SHA-1 question

Post Posted: Feb 22, 19 08:23

To avoid using third-party programs, I suggest going with python. Here are the lines of codes that perform conversion back and forth.

[b]SHA1: From HEX to Base32[/b]

python -c "import base64; ...
raydenvm
Topic: SHA-1 question
Replies: 4
Views: 842
 

Re: Hashing an evidence

Post Posted: Dec 04, 17 08:23

I would also add it's always more than good if you could save SMART table before and after imaging session. This way you'd be able to prove differences in evidence drive state if it was changed.
raydenvm
Topic: Hashing an evidence
Replies: 3
Views: 2210
 

Re: Convert from Encase to DD/Raw

Post Posted: Sep 12, 17 10:06

[quote="jaclaz"]
Now - if I may - if you could add this piece of info *anywhere* on Atola site, it would be easier for everyone to get to know that (although I jnew this was the case, I searched for ...
raydenvm
Topic: Convert from Encase to DD/Raw
Replies: 11
Views: 15563
 
Page 1 of 6
Page 1, 2, 3, 4, 5, 6  Next