Pieces0310

取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

首页 新随笔 联系 订阅 管理

随笔分类 -  Password Recovery

Crack password
摘要:Usually we will use LiveView or VFC to "boot up" the evidence files acquired from suspect's computer or laptop. What if his/her OS is Win10? Win10 has 阅读全文
posted @ 2017-08-05 08:50 Pieces0310 阅读(1017) 评论(0) 推荐(0) 编辑

摘要:Everybody knows that https is http over SSL, and https is a secure way for protecting confidential data like bank account/password ,etc. Now I'd to sh... 阅读全文
posted @ 2015-09-20 16:47 Pieces0310 阅读(431) 评论(0) 推荐(0) 编辑

摘要:When you find a ZIP/RAR file with password protected in the evidence, you may try dictionary attack or bruteforce attack or Rainbow talbes... Usually ... 阅读全文
posted @ 2015-08-15 16:55 Pieces0310 阅读(1569) 评论(0) 推荐(0) 编辑

点击右上角即可分享
微信分享提示