Kali is a Linux Debian distribution tailored to forensic investigations, computer security and penetration testing. Installing Kali in a virtual environment avoids any potential damage to the main operating system and files.
In any criminal investigation, tamper evident bags are used to collect evidence. In the UK, these bags have to meet specific government regulations in order to be admissible as evidence in court. In line with this, the UK government has published a good practice guide detailing how to use tamper evident bags (TEBs) correctly.
Forensic investigations normally take place within the framework of an incident and thus follow a common cycle of events. You suspect that an employee has found a way of intercepting emails from one of their colleagues. What would the incident lifecycle look like?
You suspect somebody of secretly using your computer and you want to perform a forensic investigation to prove it. The event log in Windows is an extremely useful tool and records huge amounts of system data.
PhotoRec is an open-source application that aims to recover media files (photos, videos and documents) from drives even after they have been deleted and removed. Despite What many user may think, files are hardly ever truly deleted.
After buying a new SSD the dreaded time had come to open up my case. Having built my PC nearly three years ago (and not doing any sort of cable management) I knew the mess that I would be faced with.
Before installing my new SSD I thought I would take the opportunity to remove all components and start over (I had that much spare time on my hands). Once I opened up the case, I forgot just how bad a state I had left it in.
The profession of forensic science has gained huge popularity in recent years thanks to television programs such as CSI and Silent Witness. These programs utilise different disciplines of forensic science including pathology, DNA, toxicology and digital. With this in mind, just how accurate is the science behind a TV drama?
A knowledge base can be defined as a centralised system for the storing of data, typically in the form of a database. Knowledge bases can be used in a multitude of business environments and could contain information on various different subject areas (think Wikipedia).
When we have this repository of centralised information at our fingertips how useful can it be and what are the benefits for the end user and the business?