forensicfocus.com的 10 大竞争对手

oxygenforensics.com

Starting with Oxygen Forensic® Detective version v.15.4, we have enabled analysis of physical images and external disks that use Logical Volume Manager technology.

magnetforensics.com

Resources Discover our latest resources and thought leadership content. Upcoming webinars

eforensicsmag.com

With this subscription you will get access to all eForensics, Hakin9, and PenTest, newest magazines, archives, and Workshop eBooks that are based on our online courses (they contain the entire reading material from the course).

cellebrite.com

Cellebrite provides end-to-end digital forensics solutions trusted by 60,000+ agencies in 150 countries. Extract, analyze & manage mobile evidence.

exterro.com

Expert insights, reports, webinars, and tools for eDiscovery, digital forensics, and data governance. Manage risk, streamline compliance, and act confidently.

salvationdata.com

Answers to our most frequently asked questions and topics like work process, how we works, services, and all information regarding company. Read our faq.

dfir.science

Someone recently asked about an easy way to create a RAW image of virtual machine (VM) disks, so here is a quick how-to.If you have access to the VM host, you could either copy and convert the virtual disks on the host using something like qemu-img, or if for some reason you cannot convert the virtual disks, you can image the VM from within the virtual environment. This how-to will go through relatively easy ways to image a live or offline virtual machine using the virtual environment with access to the host.First, if the virtual machine cannot be shut down (live environment), you will make changes to the ‘suspect’ environment. If it is a suspect device, make sure your tools are on write-protected media. Verification of disk images won’t work in a live environment since the disk is changing while imaging is taking place. If you are doing and offline acquisition for forensic purposes, make sure you are verifying the images once you create them.If the VM is live and cannot be shut down:Fist check if the management interface allows devices to be attached to the VM; specifically USB/Firewire devices.If you cannot attach devices for whatever reason, then you will have to use a network share or a netcat tunnel to copy the image.Ensure your storage media is larger than the Virtual Machine’s diskIf it is a Windows environment, copy your imaging program like FTK Imager lite, or dd.exe from unxutils, to the network share/USB device. I also like chrysocome’s dd since it lets you list devices.In the Virtual Machine, mount your share/USB deviceFrom the mounted device, you should be able to access and run the imaging tools you copied previously - ensure you output the image to your share/USB device.ddFTK Imager LiteIf the VM is offline or can be shut down:First check if you can boot the VM from

computersecuritystudent.com

computer security student llc provides cyber security hac-king-do training, lessons, and tutorials in penetration testing, vulnerability assessment, ethical exploitation, malware analysis, and forensic investigation.

blog.ampedsoftware.com

In this article, we're dealing with playback speed, which is tightly related to the video's time resolution and is also very important.