Digital Forensics Framework v0.4.3 available

最新推荐文章于 2022-08-30 08:21:48 发布
最新推荐文章于 2022-08-30 08:21:48 发布
阅读量1.2k 收藏
点赞数
文章标签： scripting python file interface api system

Dff (Digital Forensics Framewor) is a simple but powerfull open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc. The source code is written in C++ and Python, allowing performances and great extensibility

Features

API :

- Stackable File System (made multi-layer analysis possible)
- Environement API for auto-completion and auto generation of Graphical Script
- Multi-threaded (possiblity to launch modules in background, so investigator can continue to work on the cases even if they launched modules that do heavy computations)
- Hash calculation possible with different algo (MD5, SHA1, SHA256)
- File oriented data representation (ex: a zip file can be browse like a normal directory, bypass zip-bomb problem)
- MAC Times access

Users :

- An user-friendly Graphical Interface, with multi-browser and dockable widget
- A console interface
- Multi-Platform (Linux, Windowx, futur port on BSD & OS X )
- Tagged modules
- Gallery view
- File type auto-detection (don’t rely on file extension)
- Command history

Developers:

- API available both in Python and C++
- Core API wrote in C++ for enhanced speed
- Live Scripting : API available and scriptable in live with a python interpreter
- Easy drivers and script developement through our API
- Possibility of writing script both in console or in QT for graphical use
- IDE, with template available for our different type of modules (graphical, console, drivers...)

Available Drivers and Scripts:

- FAT 12/16/32 Drivers
- FTL-Reconstruction and CellPhone file system
- SMS-Decode
- SHM (Shared Memory) and more here

 

Download地址:http://www.digital-forensic.org/download-en.html

cnbird2008
关注
Digital Forensics with Kali Linux pdf
06-19
Learn the skills you need to take advantage of Kali Linux for digital forensics investigations using this comprehensive guide Key Features Master powerful Kali Linux tools for digital investigation and analysis Perform evidence acquisition, preservation, and analysis using various tools within Kali Linux Implement the concept of cryptographic hashing and imaging using Kali Linux Perform memory forensics with Volatility and internet forensics with Xplico. Discover the capabilities of professional forensic tools such as Autopsy and DFF (Digital Forensic Framework) used by law enforcement and military personnel alike Book Description Kali Linux is a Linux-based distribution used mainly for penetration testing and digital forensics. It has a wide range of tools to help in forensics investigations and incident response mechanisms. You will start by understanding the fundamentals of digital forensics and setting up your Kali Linux environment to perform different investigation practices. The book will delve into the realm of operating systems and the various formats for file storage, including secret hiding places unseen by the end user or even the operating system. The book will also teach you to create forensic images of data and maintain integrity using hashing tools. Next, you will also master some advanced topics such as autopsies and acquiring investigation data from the network, operating system memory, and so on. The book introduces you to powerful tools that will take your forensic abilities and investigations to a professional level, catering for all aspects of full digital forensic investigations from hashing to reporting. By the end of this book, you will have had hands-on experience in implementing all the pillars of digital forensics—acquisition, extraction, analysis, and presentation using Kali Linux tools. What you will learn Get to grips with the fundamentals of digital forensics and explore best practices Understand the workings of file systems, storage, and data fundamentals Discover incident response procedures and best practices Use DC3DD and Guymager for acquisition and preservation techniques Recover deleted data with Foremost and Scalpel Find evidence of accessed programs and malicious programs using Volatility. Perform network and internet capture analysis with Xplico Carry out professional digital forensics investigations using the DFF and Autopsy automated forensic suites Who This Book Is For This book is targeted at forensics and digital investigators, security analysts, or any stakeholder interested in learning digital forensics using Kali Linux. Basic knowledge of Kali Linux will be an advantage. Table of Contents Introduction to Digital Forensics Installing Kali Linux Understanding File Systems and Storage Media Incident Response and Data Acquisition Evidence Acquisition and Preservation with DC3DD and Guymager File Recovery and Data Carving with Foremost and Scalpel Live and Memory Forensics with Volatility Autopsy – The Sleuth Kit Network and Internet Capture Analysis with Xplico Collecting, Preserving and Revealing Evidence using DFF
Digital Forensics Framework：数字取证的革命性工具
最新发布
gitblog_00052的博客
09-08 933
Digital Forensics Framework：数字取证的革命性工具 dffDFF (Digital Forensics Framework) is a Forensics Framework coming with command line and graphical interfaces. DFF can be used to investigate hard drives and ...
Statistical tools for digital forensics
01-16
这是一个不错的重采样文献，可以下载看看！
App forensics
weixin_30386713的博客
04-08 63
A friend of mine claimed that someone stole her personal data via hacking certain App. She installed that App several months ago and registered an account. The user information including name,phone nu...
IT审计取证工具
jackyrongvip的专栏
04-12 668
计算机取证是与计算机和网络犯罪有关的，一门非常重要的计算机学科分支。在早前，计算机只用于生成数据，但现在已扩展到与数字数据相关的所有设备。计算机取证的目标是通过使用数字资料的证据来进行犯罪调查，以找出网络相关罪行的主要责任人。 为了更好的用于研究和调查，开发人员创建了多样的计算机取证工具。公安部门和调查机构可以根据自身情况，如预算和现有专家队伍等因素，来选取合适的取证工具。 这些电脑取证工具，也被分为了不同的类别： 磁盘和数据捕获工具 文件查看器 文件分析工具 注册表分析工具 互联网分析工具
Digital Forensics And Cyber Crime
07-05
Digital Forensics And Cyber Crime， 10th International EAI Conference, ICDF2C 2018 New Orleans, LA, USA, September 10–12, 2018 Proceedings
Python Digital Forensics Cookbook epub
10-09
Python Digital Forensics Cookbook 英文epub 本资源转载自网络，如有侵权，请联系上传者或csdn删除 本资源转载自网络，如有侵权，请联系上传者或csdn删除
Python Digital Forensics Cookbook azw3
10-09
Python Digital Forensics Cookbook 英文azw3 本资源转载自网络，如有侵权，请联系上传者或csdn删除 本资源转载自网络，如有侵权，请联系上传者或csdn删除
Digital Forensics with open source tools
08-03
are brand new to the world of digital forensics, to active practitioners that are still early in their careers, to seasoned system administrators looking to make a career change. While this book is ...
20款受欢迎的计算机取证工具
caoyongsheng的博客
08-30 3939
以上列举的都是些执法机构在进行网络犯罪调查时，常用到的数字取证工具。本文我为大家介绍了各种类型的工具，如如高级，免费，开源类的，针对计算机的取证，以及针对手机的取证等。如果你想学习或正在学习取证相关的知识，我建议大家可以下载以上列举的这些工具，进行深入的研究与学习。这将会有助于提高你的学习效率。除了本文列举的这些工具，其实市面上还有很多类似的优秀的工具。这需要大家自己去试验和挖掘。...
计算机取证之你必须要会用的24款工具
weixin_30706691的博客
03-21 1049
什么是计算机取证？ 计算机取证（Computer Forensics，又名计算机取证技术、计算机鉴识、计算机法医学）是指运用计算机辨析技术，对计算机犯罪行为进行分析以确认罪犯及计算机证据，并据此提起诉讼。也就是针对计算机入侵与犯罪，进行证据获取、保存、分析和出示。计算机证据指在计算机系统运行过程中产生的以其记录的内容来证明案件事实的电磁记录物。从技术上而言。计算机取证是一个对受侵计算机系统进行扫...
22款受欢迎的计算机取证工具
农村的我的专栏
10-16 6830
原文转载于:http://www.freebuf.com/sectool/136921.html 计算机取证是与计算机和网络犯罪有关的，一门非常重要的计算机学科分支。在早前，计算机只用于生成数据，但现在已扩展到与数字数据相关的所有设备。计算机取证的目标是通过使用数字资料的证据来进行犯罪调查，以找出网络相关罪行的主要责任人。 为了更好的用于研究和调查，开发人员创建了多样的计算机取证工具。
CTF工具集合
极光时流
11-05 6884
CTF工具网址逆向工程Hex editors:网络隐写：电子取证：社会工程无线网络AWD中防护AWD中攻击：编程以及编码工具/PPC 逆向工程 GDB -http://www.gnu.org/software/gdb/download/ IDA Pro – ==https://www.hex-rays.com/products/ida/support Immunity Debugger –http...
【转载】什么是数字取证(Digital forensics)？
Chahot的博客
02-07 7843
数字取证定义 数字取证（Digital forensics），有时也称作“计算机取证”，是将科学调查技术应用于数字犯罪和攻击领域的一门学问。它是法律和商业在互联网时代的一个重要体现方面，可以是一个有益且有利可图的职业道路。 DFIRLABS的首席取证科学家Jason Jordaan将数字取证定义为“数字证据的识别、保存、检查和分析，使用经过科学认可和验证的过程，并在法庭上最终呈现该证据以回答某些法律问题。” 这是一个非常好的定义，但需要注意的一点是，该术语有时用于描述任何类型的网络攻击调查，即使不涉及执法.
网络安全应急响应技术实战指南
信安路上……
12-17 4863
文章转载：https://github.com/meirwah/awesome-incident-response/blob/master/README_ch.md 用于安全事件响应的工具与资源的列表，旨在帮助安全分析师与 DFIR 团队。 DFIR 团队是组织中负责安全事件响应（包括事件证据、影响修复等）的人员组织，以防止组织将来再次发生该事件。 目录 对抗模拟 工具集 书籍 社区 磁盘镜像创建工具 证据收集 事件管理 Li
Kali Linux渗透测试 152 活取证和死取证
kevinhanser
04-20 2462
本文记录 Kali Linux 2018.1 学习使用和渗透测试的详细过程，教程为安全牛课堂里的《Kali Linux 渗透测试》课程 Kali Linux渗透测试（苑房弘）博客记录 1. 活取证1. 从内存还原文字procdump.exe下载地址strings.exe下载地址 其他文字处理程序也适用C:\> procdump -ma notepad.exe notepad.dmp C:\
LESSON 8 DIGITAL FORENSICS part IV
sarah_jieyu的专栏
09-29 442
密码破解
X-ways Forensics取证分析工具快速入门教程
"X-ways_Forensics_教程" X-ways Forensics是一款专业的计算机取证分析工具，常用于犯罪调查、数据恢复和系统安全分析等领域。本教程详细介绍了该软件的使用方法，包括从配置软件到高级应用的全过程。 在配置软件...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值