forensics

2011.02.28

CAINE – http://www.caine-live.net/
Mobius Forensics Toolkit – http://freshmeat.net/projects/mobiusft
Process Hacker – http://processhacker.sourceforge.net/
Netwitness Free Edition – http://www.netwitness.com/
Volatility – https://www.volatilesystems.com/default/volatility/: extract digital artifacts from volatile memory (RAM) samples – [Python based]
SandMan – http://sandman.msuiche.net: read the hibernation file, regardless of Windows version – [Python based]
LibForensics – http://code.google.com/p/libforensics/: library for developing digital forensics applications – [Python based]
TrIDLib – http://mark0.net/code-tridlib-e.html: identify file types from their binary signatures. Now includes Python binding – [Python based]

Comments (1)

“The Hacker Manifesto” by “+++The Mentor+++” (1986.01.08) – http://www.mithral.com/~beberg/manifesto.html
“How To Become A Hacker” by Eric Steven Raymond (2001) – http://www.catb.org/~esr/faqs/hacker-howto.html
- Eric Raymond’s FAQ collection – http://www.catb.org/~esr/faqs/
“Hackers and Painters” by Paul Graham (2003.05) – http://www.paulgraham.com/hp.html

Ashkan Soltani’s site – http://www.ashkansoltani.org/ – an independent researcher and consultant focused on privacy, security, and behavioral economics.
- KnowPrivacy by Ashkan Soltani – http://knowprivacy.org/ – site dedicated to his Master’s thesis
The National Software Reference Library (NSRL) Project Web Site (@NIST): http://www.nsrl.nist.gov/. They provide the Reference Data Set (RDS), which is a collection of digital signatures of known, traceable software applications. There are application hash values in the hash set which may be considered malicious, i.e. steganography tools and hacking scripts. There are no hash values of illicit data, i.e. child abuse images.
(An compendium of US) State Security Breach Notification Laws – http://www.ncsl.org/IssuesResearch/TelecommunicationsInformationTechnology/SecurityBreachNotificationLaws/tabid/13489/Default.aspx
Faves.com list of links:
- Hacking – http://faves.com/users/jopiter/friends/dots/tag/hacking
- Penetration testing – http://faves.com/users/jopiter/friends/dots/tag/penetration+testing
- Framework – http://faves.com/users/jopiter/friends/dots/tag/framework
Security-Shell blog – http://security-sh3ll.blogspot.com/ – tools.
“SecurityConfig” site – http://www.securityconfig.com/ – tools
::eSploit:: – http://esploit.blogspot.com/ – looks like a blog linking to the various security/hacking resources.