摘要：
My friend is a developer and her colleague May was suspected of stealing the source code of an important project "X". The Police searched her apartmen 阅读全文
posted @ 2017-10-06 16:10 Pieces0310 阅读(567) 评论(0) 推荐(0) 编辑
2017年10月6日
2017年9月13日
摘要：
No doubt everybody knows that iPhone 8 & iPhone X appear on the market. A feature called FaceID draws my attention. It's really a revolution of recogn 阅读全文
posted @ 2017-09-13 21:16 Pieces0310 阅读(216) 评论(0) 推荐(0) 编辑
2017年8月10日
摘要：
Last year hackers stole millions from Taiwan First Commercial bank's ATMs without using a card. This was absolutely a premeditated attack. Hackers "br 阅读全文
posted @ 2017-08-10 18:10 Pieces0310 阅读(305) 评论(0) 推荐(0) 编辑
2017年8月5日
摘要：
Usually we will use LiveView or VFC to "boot up" the evidence files acquired from suspect's computer or laptop. What if his/her OS is Win10? Win10 has 阅读全文
posted @ 2017-08-05 08:50 Pieces0310 阅读(1011) 评论(0) 推荐(0) 编辑
2017年8月3日
摘要：
As we know that WeChat will wipe deleted chat messages. That's why forensic guys could not dig out any deleted chat messages in EnMicroMsg.db. Is it p 阅读全文
posted @ 2017-08-03 13:13 Pieces0310 阅读(1116) 评论(0) 推荐(0) 编辑
2017年7月25日
摘要：
在检测App的过程之中,总会遇到比较棘手的,以”侦测是否遭破解的装置”为例,便会是个不好处理的状况.当App具备侦测装置是否已遭Root时,一旦发现装置已遭破解,便会停止运行,等于是只准安装及运行在未Root的装置之上. 有人会说,那就装可以”反反制”的App,来欺骗特定App是运行在非Root的装 阅读全文
posted @ 2017-07-25 23:12 Pieces0310 阅读(300) 评论(0) 推荐(0) 编辑
2017年7月24日
摘要：
My friend told me that she installed EnCase v8.05 on her workstation which OS version is Win 10. She conducted an index search but no any hits found i 阅读全文
posted @ 2017-07-24 21:07 Pieces0310 阅读(342) 评论(2) 推荐(0) 编辑
2017年7月4日
摘要：
My friend asked me why she could not find some important files in a physical image acquired from an Android phone. She took the evidence tree of an An 阅读全文
posted @ 2017-07-04 23:11 Pieces0310 阅读(682) 评论(3) 推荐(0) 编辑
2017年6月25日
摘要：
大家应该会很好奇Facebook又在搞什么新花招，这个专利的名称是"Techniques for emotion detection and content delivery"，其用意是要以手机或笔电的前镜头(front-facing camera)侦测使用者对观看内容的反应，捕捉其表情，藉以察觉情 阅读全文
posted @ 2017-06-25 22:17 Pieces0310 阅读(283) 评论(0) 推荐(0) 编辑
2017年5月8日
摘要：
Someone ask me how to image a CD/DVD ROM and generate hash value in the same time. A small tool called "dcfldd" could achieve this goal. Compared to d 阅读全文
posted @ 2017-05-08 21:40 Pieces0310 阅读(558) 评论(2) 推荐(0) 编辑