Computer Forensics' LAB

-
What are some characteristics of a good forensics’ lab? If you were to set up a forensics lab and had a limited budget, what would be the top five items you would include in the lab? 


(Evans, 2015) states that effective and efficient investigations depend on establishing and maintaining a computer forensic laboratory that supports and optimizes the entire investigative process end-to-end and can withstand any evidentiary challenges. 

The characteristics of a good forensics’ lab include; 
  • Proper electrical infrastructure that keeps the sensitive equipment safe from current changes. 
  • A good heating , ventilation and air conditioning (HVAC) 
  • Acoustics – room should be as soundproof as possible 
  • Has a workspace and common space for storage 
  • Has secure internet 
  • Physical security is essential to maintaining proper control of evidence. 
Price point is a consideration, however while there are other low-cost alternative products for forensic lab testing it is important to rely on dependable and regulatory compliant, accredited systems. Another consideration is analysis time for forensic lab instrument. 

With a computer preferably a desktop being a constant, these Tools are needed for a limited budget digital forensic LAB  

Tool 

Features 

John the Ripper 

Password recovery for Windows and Linux 

Camouflage 

Digital Steganography  

Access Data Forensic Toolkit (FTK) 

  • Imager 

  • Registry viewer 

  • Password recovery 

  • Query searching 

  • Data carving 

  • Integrated viewers and media player to view any set of data. 


References: 
Evans, B. (2015). Is Your Computer Forensic Laboratory Designed Appropriately? Retrieved 27 May 2020, from https://securityintelligence.com/is-your-computer-forensic-laboratory-designed-appropriately/ 

  

Comments

Post a Comment

Popular posts from this blog

Chain of Custody - OJ Simpson case

-
Image
Research the OJ Simpson trial. How do you think chain of custody was handled? What should have been done differently? There was a lot of doubts due to the amount of evidence that was collected but not actually recorded using the chain of custody. This resulted in theories being created which claimed that the police and scenes of crime officers were actually planting evidence, an example of evidence that was collected but not recorded in the chain of custody would be the drops of blood that were found at the crime scene which scenes of crimes officers thought was OJ Simpsons, it was later found that test tube filled with blood was not sent straight to the lab for inspection, it was left at the police station for many hours before actually making its way to the lab to be analyzed which further increased suspicion that evidence was being tampered with.  Everything from the crime scene should have been documented and added over to the right personnel in charge and for the time sensitiv...
Read more

File Carving or Data Carving

-
Image
What does the term "data carving" or "file carving" really mean? What are the implications of carving with a large distance (in bytes) between the header and footer? Is it feasible for a malware author to create their own file format, hide the file on a system, and use carving to extract it?   File carving is the process of reassembling computer files from fragments in the absence of file-system metadata.  File carving is a well-known computer forensics term used to describe the identification and extraction of file types from unallocated clusters using file signatures. A file signature, also commonly referred to as a magic number, is a constant numerical or text value used to identify a file format   ("Data Carving", 2018) .   Since File carving   is usually done by examining the header (the first few bytes) and footer (the last few bytes) of a file, larger distance between the footer and header will affect the amount of data recovered during  the process...
Read more

Legal Issues with Social Networking

-
Image
  Exploring the privacy legal issues associated with online social networking sites. According to data collected by Hootesuite, 45% of the world 's population is using social networks. That means a whopping 3.48 billion people are linked to any social Network. The Wiki Article states that Privacy issues with social networking sites are a subset of data privacy that includes the right to require personal privacy regarding storage, re-use, third-party provision and display of self-relevant information through the Internet. These social platforms use Apps that allow users to participate are tweets, invites, videos, open platform applications and other applications that are also the platforms for others to access private information about a user. Privacy Issues include cyber-stalking, location disclosure, social profiling, 3rd party personal information disclosure, and government use of social network websites in investigations without the safeguard of a search warrant. The above is al...
Read more