'Article/Forensics'에 해당되는 글 8건

  1. 2013.07.08 Windows Forensics
  2. 2012.06.12 RFC3227
  3. 2010.11.01 경찰수사연수원 디지털포렌식 챌린지
  4. 2010.09.28 형사소송학회 디지털포렌식 전문가 2급 자격시험
  5. 2010.05.11 Guidance Software, Tableau 인수
  6. 2010.02.26 SANS Forensics Whitepapers 2
  7. 2009.12.29 DFRC
  8. 2009.12.02 디지털 포렌식 기술과 표준화 동향

Windows Forensics

| 2013. 7. 8. 19:34
보호되어 있는 글입니다.
내용을 보시려면 비밀번호를 입력하세요.

RFC3227

|

영문

 

rfc3227.pdf

 

 

국문번역본

 

rfc_3227.pdf

 

 


2.1 Order of Volatility



   When collecting evidence you should proceed from the volatile to the
   less volatile.  Here is an example order of volatility for a typical
   system.

      -  registers, cache

      -  routing table, arp cache, process table, kernel statistics,
         memory

      -  temporary file systems

      -  disk

      -  remote logging and monitoring data that is relevant to the
         system in question

      -  physical configuration, network topology

      -  archival media

And

경찰수사연수원 디지털포렌식 챌린지

|

'Article > Forensics' 카테고리의 다른 글

Windows Forensics  (0) 2013.07.08
RFC3227  (0) 2012.06.12
형사소송학회 디지털포렌식 전문가 2급 자격시험  (0) 2010.09.28
Guidance Software, Tableau 인수  (0) 2010.05.11
SANS Forensics Whitepapers  (2) 2010.02.26
And

형사소송학회 디지털포렌식 전문가 2급 자격시험

|

'Article > Forensics' 카테고리의 다른 글

RFC3227  (0) 2012.06.12
경찰수사연수원 디지털포렌식 챌린지  (0) 2010.11.01
Guidance Software, Tableau 인수  (0) 2010.05.11
SANS Forensics Whitepapers  (2) 2010.02.26
DFRC  (0) 2009.12.29
And

Guidance Software, Tableau 인수

|


EnCase 개발사인 GSI가 Forensic H/W 업체인 Tableau를 인수했습니다.

EnCase 6.13에서 Tableau Write Blocker를 인식하게 되었을때 좀 수상하긴 했는데

이렇게 인수를 해버리는군요.

Tableau 제품의 성능은 경쟁업체에 비해 뛰어나진 않지만 저렴한 것이 장점이었는데

이제 EnCase와의 Synergy (혹자 말대로라면 알파라이징-_-) 효과를 낼 수 있을지 궁금합니다.

기존 FastBloc을 OEM으로 만들던 Wiebetech는 또 어떻게 될까요?

더 궁금한건 AccessData의 PRTK와 H/W 가속기인 Tableau의 TACC1441의 연동이 어떻게 진행될지 궁금하네요.

다음은 보도자료입니다.

=====================================

Guidance Software Acquires Assets of Forensic Hardware Leader Tableau LLC (10 May 2010)

Tableau President to Lead Dedicated Business Unit Focused on Forensic Software and Hardware

PASADENA, Calif., May 10, 2010 (BUSINESS WIRE) -- Guidance Software, Inc. (NASDAQ: GUID) today announced it has signed a definitive agreement to acquire substantially all of the assets of Tableau, LLC, a privately-held developer and manufacturer of computer forensic hardware. This acquisition extends Guidance Software's existing leadership in computer forensics technology by combining software with hardware for a complete forensic framework for the law enforcement, legal and corporate communities.

The purchase price for this transaction was $12.3 million in cash. The assets of Tableau include cash of $1.6 million. Guidance Software expects this transaction to increase previous revenue guidance by $3 million and be $0.03 accretive to its non-GAAP earnings per share in 2010. The acquisition closed May 7, 2010.

Guidance Software customers now have access to a family of data-acquisition products - tools to gather evidence and other data - including multiple "write blocker" products, forensic duplicators and other hardware. Write-blockers protect data while it is being collected during the computer forensic process, eliminating any risk of changing the data - especially useful in criminal cases and other legal investigations. Tableau has sold more than 100,000 write-blockers since the company's inception. Forensic duplicators provide an efficient and forensically sound way to copy data being used in a computer forensics investigation.

"Tableau is, by far, the leader in forensic hardware, and their products complement our industry-leading EnCase(R) Forensic software," said Victor Limongelli, president and chief executive officer, Guidance Software. "The acquisition serves our key strategic aim to strengthen our leadership position in the computer forensics market. Customers should benefit from a broadened product line addressing the complete forensic process, with improved interoperability and best-in-class performance."

Guidance Software also has created a forensic business unit, headed by former President of Tableau Robert Botchek. The business unit is dedicated to continuing Guidance Software's leadership in computer forensics by developing and delivering software and hardware products trusted by forensic, law enforcement, defense, and intelligence organizations worldwide.

"Forensic users want a vendor focused on their needs, and that's exactly what we will give them with the new forensic business unit," said Botchek, now senior vice president of Forensic Solutions at Guidance Software. "Our mission is simple: listen to users and apply our combined talents in software and hardware to tailor EnCase products for their needs."

In addition to the forensic business unit's focus on the needs of law enforcement and other computer forensics customers, Guidance Software will continue to invest in its EnCase(R) eDiscovery and EnCase(R) Cybersecurity products, as well as its EnCase(R) Enterprise platform, which is trusted by more than 800 customers. These product lines continue to be a major focus, and represent an important growth opportunity.

And

SANS Forensics Whitepapers

|
And

DFRC

|
And

디지털 포렌식 기술과 표준화 동향

|

2008년 8월 TTA 저널에 올라온 ETRI 길연희 연구원, 홍도원 팀장님 자료




And
prev | 1 | next