Infosec student here really interested in digital forensics. Are there any federal government digital forensic workers that visit this thread by any chance? I'd love to know the procedures that you follow when seizing evidence (hard drive/anything digital). I was reading a news article about the recent terror attack in California and how the FBI seized the targets computer for analysis. What type of analysis is done? memory forensics? ddfldd harddrive clones? any in-depth information/links /b/ros? Thanks so much in advance!
>>52133624
Is the wanting of information/knowledge truly looked down upon these days? :(
>>52133644
how do we know you're not the man, man
>>52133664
You don't that's the point
psa : "the man" watches all of 4chan - and nothing about my thread is illegal or even questionably illegal.
>>52133701
ever since that random whistleblower posted info here on 4chan (that no one believed, LOL) this sites been crawled daily (imho???)
shameless bump :/
>>52133788
How to manage offshore offlocation nas and hotspot wifi
I was thing of simple cheapest x64 mobo or cheapest pc i can't find c2d and 12v powersupply on top of some big building. The bigest problem i have is wifi, i don't know, i can use ofc 2.4ghz, but speed ad 0,5 will be reduced, 900mhz like in memebox would be nice but it cost too much, then i am not sure about 5 ghz wifi.
Has anonyone made that project?
>>52133615
Dc3dd or you're a fag. Also, you will need a portable refrigerator for the RAM and a lot of hdds to contain the forensic evidence.
>>52133615
You aren't going to get an answer like this anywhere else and you're lucky that I know about this but am not under any NDA since I'm not a government worker as of yet.
http://accessdata.com/solutions/digital-forensics/ad-lab
This is what they use in all investigations. Google it up for more information and read the website. Memory forensics as you asked, is indeed done through hardware and virtual memory means.
Seize hdd.
Attach to computer designated specifically for purpose of sifting through hdd.