Disk Imaging Approaches
by Chetan Gupta, NII Consulting Evidence Collection is the heart and soul of the Forensics process. It becomes even more […]
Category: Disk Forensics
Laptop Imaging Simplified
by Chetan Gupta, NII Consulting How many times in an investigation does a forensic investigator come across the problem of […]
Bad Superblock, corrupt inode tables and loads of bad luck!
by Chetan Gupta, NII Consulting Well, last week was abuzz with activity when we had to recover data from a […]
Data Carving Issues
by Chetan Gupta, NII Consulting Many a times as an investigator, I have to deal with the issue of carving […]
File Slack Vs RAM Slack Vs Drive Slack
by Chetan Gupta, NII Consulting A small experiment…Create a new text file. Edit it using Notepad and type “Hello” in […]
Article on Dissecting NTFS Hidden Streams
NII Consulting’s Chetan Gupta (GCFA) has published an article at ForensicFocus on the Alternate Data Streams in NTFS, and how […]
LINReS – An open source Linux Incident Response Tool!
By Chetan Gupta, NII Consulting In accordance with NII’s mantra of innovation and research, we have developed our own tool […]
Rainbow Tables Simplified (Password Cracking for Windows)
By Bhushan Shah, NII Consulting Windows passwords are stored in the registry (encrypted) in the form of a hash. LMHash […]
Understanding Index.dat (Internet History Data File in Windows)
by Bhushan Shah, NII Consulting The index.dat is a file which contains the list of the websites that one has […]
Hiding data with Host Protected Area (HPA) in Linux
By Kush Wadhwa, NII Consulting Have you ever thought of hiding data in such a manner that it cannot be […]