DarknessGate.com

OPEN SECURITY TRAINING .INFO

Filed under Technical Training
October 19, 2016
October 19, 2016

In the spirit of OpenCourseWare and the Khan Academy, OpenSecurityTraining.info is dedicated to sharing training material for computer security classes, on any topic, that are at least one day long. All material is licensed with an open license like CreativeCommons, allowing anyone to use the material however they see fit, so long as they share …

Android, Linux OS, Mac, Malware Analysis, Mobile Networks, Safety Online, Secure Communication, Security learning, vulnerability scanner, Windows OS

Permanent link to this article: https://www.darknessgate.com/2016/10/19/open-security-training-info/

Mft2Csv

Filed under $MFT Parser
October 7, 2016
October 7, 2016

Extract $MFT record info and log it to a csv file. This tool is for parsing, decoding and logging information from the Master File Table ($MFT) to a csv. It is logging a large amount of data and that has been the main purpose from the very start. Having all this data in a csv …

Command Line Tool, Computer Forensics, Cyber intelligence, Malware Analysis, open source, Windows OS

Permanent link to this article: https://www.darknessgate.com/2016/10/07/mft2csv/

LiME (formerly DMD)

Filed under Memory Imaging
September 17, 2016
September 17, 2016

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. Full Android memory acquisition Acquisition over network interface Minimal process footprint …

Android, Computer Forensics, Cyber intelligence, Linux OS, Malware Analysis

Permanent link to this article: https://www.darknessgate.com/2016/09/17/lime-formerly-dmd/

Evolve

Filed under Memory Forensics, Memory Imaging
September 16, 2016
September 16, 2016

Web interface for the Volatility Memory Forensics Framework https://github.com/volatilityfoundation/volatility Works with any Volatility module that provides a SQLite render method (some don’t) Automatically detects plugins – If volatility sees the plugin, so will eVOLve All results stored in a single SQLite db stored beside the RAM dump Web interface is fully AJAX using jQuery & …

Computer Forensics, Cyber intelligence, Framework, Malware Analysis, open source

Permanent link to this article: https://www.darknessgate.com/2016/09/16/evolve/

The Forensic Analysis Toolkit (FATKit)

Filed under Memory Forensics, Memory Imaging
September 15, 2016
September 15, 2016

The Forensic Analysis Toolkit (FATKit) is a new cross-platform, modular, and extensible digital investigation framework for analyzing volatile system memory. The framework is intended for researchers, law enforcement professionals, and forensics analysts who are interested in extracting and interpreting relevant information in the wake of a crime or incident. FATKit was developed in response to …

Computer Forensics, Cyber intelligence, Malware Analysis, Password Cracking

Permanent link to this article: https://www.darknessgate.com/2016/09/15/the-forensic-analysis-toolkit-fatkit/

Total Network Monitor

Filed under Network Analyzer
February 3, 2015
February 3, 2015

Total Network Monitor is a free network monitoring software for the continuous monitoring of the local network, individual computers, and services that require careful attention and thorough control. TNM will alert you of any problem in advance and generate a detailed report on the circumstances of the failure. How it works Monitor is a special …

Freeware, Malware Analysis, Mobile Networks, Network Forensics, Secure Communication, vulnerability scanner, Windows OS

Permanent link to this article: https://www.darknessgate.com/2015/02/03/total-network-monitor-2/

CAINE (Computer Aided INvestigative Environment)

Filed under Forensic Live CD/DVD
January 24, 2015
January 24, 2015

CAINE (Computer Aided INvestigative Environment) is an Italian GNU/Linux live distribution created as a Digital Forensics project Currently the project manager is Nanni Bassetti. CAINE offers a complete forensic environment that is organized to integrate existing software tools as software modules and to provide a friendly graphical interface. The main design objectives that CAINE aims …

Computer Forensics, Cyber intelligence, Encryption, File System, Hash, intrusion detection, Linux OS, Malware Analysis, Network Forensics, USB forensic

Permanent link to this article: https://www.darknessgate.com/2015/01/24/caine-computer-aided-investigative-environment/

BackBox Linux

Filed under Linux Security Distro
November 17, 2014
November 17, 2014

BackBox is a Linux distribution based on Ubuntu. It has been developed to perform penetration tests and security assessments. Designed to be fast, easy to use and provide a minimal yet complete desktop environment, thanks to its own software repositories, always being updated to the latest stable version of the most used and best known …

anonymouse, checksum, Command Line Tool, Computer Forensics, Cyber intelligence, Framework, Hash, Internet Protocols, Linux OS, Malware Analysis, Network Forensics, open source, Portable Version, vulnerability scanner

Permanent link to this article: https://www.darknessgate.com/2014/11/17/backbox-linux/

Registry Decoder

Filed under Registry analysis
November 11, 2014
November 11, 2014

Accurate, efficient analysis of the Windows registry Registry Decoder provides a single tool in which to perform browsing, searching, analysis, and reporting of registry hive contents. All functionality is exposed through an intuitive GUI interface and accommodates even novice investigators. Registry Decoder also acts as a great resource for new research and experimenting within the …

Computer Forensics, Cyber intelligence, File System, Freeware, Malware Analysis, Windows OS

Permanent link to this article: https://www.darknessgate.com/2014/11/11/registry-decoder/

ForensicUserInfo

Filed under Registry analysis
November 11, 2014
November 11, 2014

ForensicUserInfo will extract the following information: RID Login Name Name Description User Comment LM Hash NT Hash Last Login Date Password Reset Date Account Expiry Date Login Fail Date Login Count Failed Logins Profile Path Groups http://www.woanware.co.uk/forensics/forensicuserinfo.html

Computer Forensics, Cyber intelligence, Encryption, Freeware, Malware Analysis, Windows OS

Permanent link to this article: https://www.darknessgate.com/2014/11/11/forensicuserinfo/

Volatility Interface & Extensions

Filed under Memory Forensics, Memory Imaging
November 11, 2014
November 11, 2014

This project aims to develop a software to extend the use and simplify the handling of the Volatility Framework . Objectives of VOLIX: Simplify the handling of Volatility Provide a more intuitive GUI handling Reduce complex command sequences to a single click Improving usability Increase analysis speed (no tedious typing of commands) Make comparison and correlation of results easier Offer assistance / examples Provide new functions Automated search for malware and analysis of the findings by VirusTotal Detecting of hidden …

Computer Forensics, Cyber intelligence, Malware Analysis, Windows OS

Permanent link to this article: https://www.darknessgate.com/2014/11/11/volatility-interface-extensions/

Tag: Malware Analysis

OPEN SECURITY TRAINING .INFO

Mft2Csv

LiME (formerly DMD)

Evolve

The Forensic Analysis Toolkit (FATKit)

Total Network Monitor

CAINE (Computer Aided INvestigative Environment)

BackBox Linux

Registry Decoder

ForensicUserInfo

Volatility Interface & Extensions

Categories

Archive

Data Hiding Techniques in Windows OS

Your Location

Subscribe By Email

Tag Cloud