Questions about computer-forensics
Read more about computer-forensics
python (65.1k questions)
javascript (44.2k questions)
reactjs (22.7k questions)
java (20.8k questions)
c# (17.4k questions)
html (16.3k questions)
r (13.7k questions)
android (12.9k questions)
Calculations of NTFS Partition Table Starting Points
I have a disk image. I'm able to see partition start and end values with gparted or another tools. However, I want to calculate them manually. I inserted an image , which showing my disk image partiti...
Ahmet Furkan Aydoğan
Votes: 0
Answers: 1
How do I extract the tcp data packet from Wireshark?
This is a "CTF Challenge" (a set of online infosec challenges) and I have become stuck.
I noticed in the conversation one person asks for the other person to send the salted password file.
...
Digi Jeff
Votes: 0
Answers: 1
Am I misusing this Windows registry parsing tool (yarp)? Getting error Invalid signature: b'\\xff\\xfeW\\x00'
New to forensics, but we're thinking in order to pull registries from many machines for baseline analysis, we would use PowerShell to run:
reg export HKLM hklm.reg
on every machine and then parse the ...
J.Todd
Votes: 0
Answers: 1
Good tools/techniques for identifying the format of a headerless audio file?
I have some audio files that are in this mystery format I can't quite figure out. Here is a list of things I have tried:
Opening them up with a Hex Editor
Gary Kessler's File Signatures list
Audacity...
t1pbtb
Votes: 0
Answers: 0