Introduction to Cyber Forensic

What is Cyber Forensic?

Cyber forensic is a branch of forensic science. Cyber forensic also known as computer forensic. Cyber forensic is nothing but the collection or acquisition, analysis and reporting of the digital evidences. The evidence includes following computers, hard disks, pen-drives, CD, DVD, memory cards, mobile phones, etc. There are some SOP's (Standard Operating Procedures) for cyber forensic which must be follow in every digital evidences.
  • Verification
  • Identification and Description
  • Preservation, collection and Acquisition
  • Use forensic toolkit
  • Live Acquisition is best
  • Bit stream imaging
  • Make no changes
  • Take Hash Value
  • Log Everything
  • Record and Preserve Chain of Custody
  • Processing and Review
  • Analysis
  • Productions
  • Presentation
  • Reporting




Comments

Post a Comment

Popular posts from this blog

basic introduction about networking and its components.

Image
Network: Network is connected collection of devices (computer, routers, switches and interconnections)that communicates with each other by providing the means for users to share hardware and applications. LAN: LAN Stands for Local Area Network. LAN is a network that is located in limited area with the computers and other components, that are part of this network, located relatively closed together. Ethernet Switches: Ethernet switches divides the collision domains and reduce the number of devices that are competing for bandwidth. Ethernet switches selectively forward individual frames from a receiving port to the destination port. Optical Fiber: Optical fiber permits transmission over longer distances and higher data rates. Switch: Switch creates and maintains MAC address table by using the source MAC address of incoming frames and port number through which the frames entered the switch. Components of Network: 1) Endpoints: Send and receive data. 2) Interc...
Read more

Tools for cyber forensic investigation and analysis

Which are the tools useful for forensic investigation and analysis? Here we have listed some important tools which will be useful in forensic investigation as well as crime scene while seizing the evidences, also helps in analysis and reporting of cyber crimes. NMAP: NMAP stand for Network Mapper. It is most popular tool for mapping networks and security system auditing. It also support for all operating systems like Windows, Linux, Red Hat, Mac OS. Forensic Investigator: Forensic investigator is best tool in cyber forensics. It is helpful in many types likes WHOIS/GeoIP lookup, ping, port scanner, banner grabber, URL decoder/parser, XOR/HEX?base64 converter, SMB Share/Net-BIOS viewer, virus-total lookup. Hash Calculator: Hash calculator is software useful for calculating hash values for any files as well as any folder. It generates MD5 and SHA-1 hash value. USB write blocker: USB write blocker is most important tool in prevention of data altering in our systems withou...
Read more