OSForensics - Computer and Digital Forensics
OSForensics - Computer and Digital Forensics
OSForensics - Computer and Digital Forensics
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>OS<strong>Forensics</strong></strong>Team Lead: Colby LahaieTeam Members: Kyle Porto & David LeberfingerThe Senator Patrick Leahy Center for <strong>Digital</strong> InvestigationOctober 22 nd , 2012
Patrick Leahy Center for <strong>Digital</strong> Investigation (LCDI)Introduction to <strong>OS<strong>Forensics</strong></strong>OverviewOpen source tools are viable alternatives to costly proprietary software. Open source tools arefree, while still providing quality products <strong>and</strong> flexibility. They provide a way for developers,users, <strong>and</strong> companies to collaborate together to make higher quality software, <strong>and</strong> open sourcetools allow them to shape their software to their needs. In this project, we are going to be usingan open source tool to demonstrate how a free tool can be just as useful to a forensicinvestigation as its expensive competitor.Introduction to <strong>OS<strong>Forensics</strong></strong><strong>OS<strong>Forensics</strong></strong> is an easy to use open source acquisition <strong>and</strong> analysis tool. As of now, there aremany proprietary tools which can be considered the equivalent to iPhones or Androids in thecomputer <strong>and</strong> digital forensics field. These tools have been proven to be forensically sound <strong>and</strong>accurate; however, they can cost a fortune, <strong>and</strong> many law enforcement agencies cannot affordthem. The LCDI is looking into <strong>OS<strong>Forensics</strong></strong> to see if it can be used as a cost effectivealternative to high priced forensic tools. This will hopefully provide another resource to be usedin the local law enforcement’s arsenal. This project will analyze the affectability <strong>and</strong> accuracy ofthis software compared to the leading acquisition/analysis tools. It will be led by forensic internColby Lahaie <strong>and</strong> will be worked on by work-study students Kyle Porto <strong>and</strong> David Leberfinger.In this project we are going to be specifically looking for the main evidence that is used duringforensic investigations <strong>and</strong> comparing results to those collected by the leading tools in the field.The list so far includes:Internet history/activity of IE9, Firefox, <strong>and</strong> ChromeRegistry USB ActivityMRU (Most recently used) softwareDeleted dataEncrypted DrivesHash generation <strong>and</strong> searchEmail searchReport GenerationVersion: 0.1 – Document Name: – Review Date: MM/DD/YYYY Page 2 of 3
Patrick Leahy Center for <strong>Digital</strong> Investigation (LCDI)More on this research project will follow at a later date. Subscribe to the blog to get the latest onthis project.If you have any comments, questions, <strong>and</strong>/or suggestions, please feel free to leave a commenthere on the blog or feel free to email us at LCDI@champlain.edu, putting “<strong>OS<strong>Forensics</strong></strong>” in thesubject line.Version: 0.1 – Document Name: – Review Date: MM/DD/YYYY Page 3 of 3
Change language