Digital Forensics foremost
Channel: The Expat Professor
Date: 21/04/2024

"Correction, - 10:40 MZ is a common DOS binary header!!! (Although this is not an actual binary file, the 0x4D 0x5A was found and misinterpreted by foremost as the start of a binary file) Thanks to Antiemes!

Digital Forensics foremost

This series contains Digital Forensics videos https://www.youtube.com/playlist?list=PLtVl23ckkRxHwwTUa-ebK6FjsgUKbPdTP with step-by-step tutorials on the following topics: 
tcpxtract https://youtu.be/6YGeKltLi20
foremost https://youtu.be/919DBmbwNhA
luks (Linux Unified Key Setup) https://youtu.be/V4l0PL444uI

#tutorial #digitalforensics #tcp #foremost #linux 
-----------------------
Thank you for dropping by!

Subscribe Here:
https://www.youtube.com/paulwpoteete/?sub_confirmation=1

Other Channels:
 https://www.x.com/PaulWPoteete
 https://www.linkedin.com/in/PaulWPoteete

CC by Dr. Paul W. Poteete

TIMESTAMPS
00:00 Introduction to foremost
00:21 Create a Device
00:53 Create a Drive Image
01:42 Format Device
03:21 Make a Directory
04:01 Copy Images
04:37 PDFs
04:56 umount and losetup
05:29 Install foremost
09:09 Files Extracted
09:33 nemo
09:51 exe files
10:13 hexdump
11:02 pdf files
12:16 png files
13:35 Conclusion to foremost