hemu1438/forensicsgpt-training-data huggingface dataset:
Palmos -
Palm OS is an embedded operating system initially developed by U.S. Robotics' owned Palm Computing, Inc. for personal digital assistants (PDAs) in 1996. Palm OS is designed for ease of use with a touchscreen-based graphical user interface. It is provided with a suite of basic applications for personal information management. Besides Palm, several other licensees have manufactured devices powered by Palm OS. The currently licensed version from ACCESS is now called Garnet OS, as the Palm trademark belongs to Palm, Inc.
External links
Wikipedia: Palm OS
Ace lab -
ACE is a group of companies specializing in R&D, manufacturing and services in the data recovery field. Under the ACE Lab trademark, ACE develops proprietary data recovery technologies, and provides customers with the most comprehensive and reliable professional data recovery tools on the market through its PC-3000 product line. The company has served over 15 000 customers in 110 countries worldwide.
The company offers a range of drive repair and data recovery products for HDD, SSD, SAS/SCSI, RAID arrays and Flash devices. The Data Extractor software, used in conjunction with PC-3000 Express/UDMA/Portable/Flash, is a universal data recovery solution for drive imaging, cloning, file carving and restoration.
Forensic Use
PC-3000 products are successfully used not only by data recovery businesses, but also digital forensic specialists in government agencies and police departments in many countries of the world. Special forensic features have been implemented in PC-3000 utilities and Data Extractor software to cater for their needs. Here are just some of them:
hash sum calculation for MD5 and SHA1
exporting catalogs list and files into csv format
building various maps: disk maps, used/unused sectors maps, file system metadata maps etc
unlocking the HDD
changing/resetting to factory value of MaxLBA HDD
HDD mounting in “read-only” mode
HDD data copy creation and reading to several recipients
Support and Training
Apart from developing and manufacturing, ACE Lab provides technical support and comprehensive training. The training helps get the maximum possible efficiency of the PC-3000 products, and the TS will help on most complicated cases when all other methods and tools fail.
Data Recovery Solutions
Data Extractor
PC-3000 Easy Mode
PC-3000 Express
PC-3000 Flash
PC-3000 Portable
PC-3000 SAS/SCSI
PC-3000 UDMA
Carvfs -
CarvFs is a modular Fuse based user space file system on top of LibCarvPath. CarvFS makes CarvPath style annotations as used by LibCarvPath available as files. Using CarvFs makes it possible to process carved entities using zero storage carving.
CarvFs is modular with respect to access to image files. The CarvFs distribution comes with a default module for access to (split) raw files.
A separate Libewf module is available for access to EWF images.
For use in computer forensic frameworks, CarvFS is superseded by the closely related MattockFS.
External Links
Project site
Jim christy -
Jim Christy is the head of the Futures Exploration Division of the DoD Cyber Crime Center in Linthicum, Maryland. He has previously served as a computer crime investigator for the Air Force Office of Special Investigations. He was one of the original founders of the Defense Computer Forensics Lab.
See Also
DoD Cyber Crime Center
External Links
Wikipedia entry for Jim Christy
Wired magazine article on Jim Christy
Acquire forensics -
Acquire Forensics
Acquire Forensics is a software development organization which focuses on the development of forensics tools in various areas like; data forensics, email forensics, android forensics, OS forensics, etc. Acquire Forensics is a software development organization which focuses on the development of forensics tools in various areas like; data forensics, email forensics, android forensics, OS forensics, etc. The company focuses on various areas of Data forensics, to create Innovative Tools. It offers different services and comprehensive set of software for carving digital evidence aiming to provide expertized digital forensics services.
One of the best Software of to Recover Data from Corrupt SQLite Database file given by Acquire Forensics is [SQLITE FORENSICS EXPLORER]https://www.acquireforensics.com/products/sqlite-forensic-explorer/. This Tool can turn the investigation and helps the professional expert to find any forged to the database file.
Some Advantage of SQL Forensic Explorer is given below;
1) Recover Deleted Data From SQLite Database File
2) Software support all Windows Platform
3) Color Schema to sort Different Data items
4) View Database items in Hexa View Mode.
5) Recover Data from Associated Jornal Database File.
6) Run Software smoothly without any Platform dependency.
7) Rum Multiple Queries to Find the desired result.
8) Export Report in various file Format & Maintain Hierarchial Structure
Benefits of SQL Forensic Explorer
1) Software can easily work with different format of database file such as .db, .db3, .sqlite, or .sqlite3 file. User can preview and examine the data items stored in the File
2) Tool easily work with different platform files such as Windows, Android, ios, Linux etc. SQL Forensics Explorer can easily open the database file, doesn't depend on the platform where the database file is created.
3) Examine Large size SQLite Database file without any size limitation in the tool. Tool easily load a large file and even helps user to view tables, structures, bytecode details and all multimedia data items such as images, videos etc.
4) Software support binary large object called BLOB Datatype to view varying length binary string. SQL Forensic Explorer maintains hierarchy to support sorting of items.
Josh goldfoot -
Josh Goldfoot is Senior Counsel with the Computer Crime & Intellectual Property Section of the U.S. Department of Justice. He prosecutes hackers and other computer criminals, and advises investigators and other prosecutors about privacy statutes, the Fourth Amendment, and implications of emerging technologies on law enforcement. In 2010, he was awarded the Assistant Attorney General's Meritorious Service Award. He is an accomplished software developer and computer technician, and received a United States patent in 2008 for shape recognition technology. He is a graduate of Yale University and earned his law degree from the University of Virginia School of Law. He has worked in technology law since 1999, when he advised Internet startups in Silicon Valley on intellectual property issues. Prior to joining the Department of Justice in 2005, he did appellate and civil litigation, and clerked for judge Alex Kozinski on the Ninth Circuit U.S. Court of Appeals. He was a Special Assistant United States Attorney in the Eastern District of Virginia for six months in 2007 and 2008.
Ken privette -
Ken Privette retired from federal law enforcement as the Director of the Computer Crimes Unit (CCU) at the U.S. Postal Service Office of Inspector General. His team of Special Agents and digital forensics examiners provided digital media analysis and cell phone analysis in support of federal crimes related to the Postal Service including computer security investigations. Ken pioneered digital evidence collection architectures and automated distributed analysis of corporate digital evidence. His leadership resulted in partnerships with the CIO to drive efficiencies in USPS eDiscovery and digital forensics services.
Serving stateside and overseas, Ken has also been a Special Agent with the Naval Criminal Investigative Service (NCIS) and Defense Criminal Investigative Service (DCIS) conducting counterintelligence, general crime, and computer crime investigations.
He currently serves as a member of The Spectrum Group, a premier strategic consulting consortium in Washington, DC. He also serves in a leadership role with the Digital Forensics Certification Board (DFCB), a National Institute of Justice funded effort to create an independent digital forensics certification program.
Education:
Mr. Privette holds a Masters in Public Administration (MPA) from North
Carolina State University and a B.S. from East Carolina University.
National institute of standards and technology -
The National Institute of Standards and Technology (NIST) is located in Gaithersburg, Maryland.
Part of the U.S. Department of Commerce, initially founded in 1901, the institute conducts research in technology infrastructure, products and services. NIST also develops and distributes Standard Reference Data, including the NIST Special Database 28 National Software Reference Library (NSRL). The NSRL contains known and notable hash database.
External Links
NIST Homepage
NIST Special Publication 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Kristinn gudjonsson -
Kristinn Guðjónsson used to be a team leader of information security at Skyggnir/TM Software/TM Infrastructure Management/Nyherji (same company, many different names), one of Iceland's largest hosting providers, before joining Google to be part of their IR team.
Kristinn holds a M.Sc. degree in computer engineering from INT (Institut National des Telecommunications) in Paris as well as a B.Sc. degree in electrical and computer engineering from the University of Iceland.
There is a blog out there blog.kiddaland.net that is mostly not updated, and occasional blog posts on the SANS Forensics blog.
He also likes to maintain his small open-source tool, log2timeline, a framework for extracting timestamps from various files.
Adrian santangelo -
Adrian Santangelo has over a decade of computer forensic experience which started with deep roots in information and network security. He has been a self-employed computer security and forensic consultant all his adult life. After starting ISC Unlimited as a computer security consulting firm in 1996, he quickly branched out to digital forensics and cyber sleuthing. He has been an active participant in many online forums and mailing list discussions, with plenty of information readily available about him with a simple Google search. (Much of his online security history has been done under an alias.)
He currently owns and operates Interpreting Technology, an information technology consulting firm. In Feb 2012, he was sworn in as a Skagit County Sheriff's Deputy, commissioned for computer crime and forensics. (He is currently a computer crime and forensic consultant to both law enforcement and attorneys.) His current career goal is to branch out as either a law enforcement team leader for digital forensics, focusing on northwest Washington state, or to continue to be a professional forensics consultant to the public and private sector. He is well known locally for his network security and computer repair talents. Currently held (or close to acquiring) certifications include: MCP, MNE, A+, Security+, Network+, MCSE, CCNA, CEH, CISSP, CFCE, CCE, and CHFI.
On the MediaWiki version of Forensics Wiki, Adrian was known as adrian_santangelo.
External Links
LinkedIn Profile
Business Facebook Page
Personal Facebook Page
BrandYourself Profile
Lee whitfield -
Before becoming involved in the field of digital forensics Lee worked for an international construction law company working directly under the director responsible for forensic construction. Lee's passion for computers caused him to enrol in the first Computing (Forensics) degree at the University of Central Lancashire in Preston. Graduating three years later Lee started his first job in digital forensics. It was here that he gained a good grounding in the field. After two years he moved to join his brother, Simon, at Zentek Forensics. Lee worked as the lab manager and was directly responsible for all computer examinations performed at Zentek. Lee then worked at Disklabs where he supervised all computer investigations before moving his family to Dallas, Texas to join Digital Discovery. Lee has now worked in the field for over eight years and has conducted over 500 investigations and has experience in cases involving child abuse, rape, attempted murder, fraud, intellectual property theft, burglary, and so on. Lee is a SANS Community Instructor, teach the FOR408 Windows Forensics class. Lee is also the creator of the Forensic 4cast podcast and the Forensic 4cast Awards.
Amber schroader -
Amber Schroader is the Chief Executive Officer (CEO) of Paraben Corporation and has been a driving force in the field of computer forensics for the past sixteen years. During this time, she has developed and taught numerous courses for the computer forensic arena, specializing in wireless forensics as well as mobile technologies. Ms Schroader is the CEO of Paraben Corporation and is the driving force behind many of the most innovative forensic technologies on the market today. Ms Schroader has been key in developing new and effective technology to help investigators with the extraction of digital evidence from hard drives, e-mail and, mobile devices. Ms Schroader coined the concept of the 360 degrees of digital forensics for each of these areas. Ms Schroader has extensive experience working with all sectors of forensic investigation, ranging from federal, state, local, corporate and private parties. With an aggressive development schedule, Ms Schroader continues to bring new and exciting technology to the computer forensic community world-wide and is dedicated to supporting the investigator through new technologies and training services that are being provided through Paraben Corporation. Ms. Schroader has been a contributor to several books in the field of Digital Forensics including Wireless Crime and Forensic Investigation, Techno Security Guide to Managing Risks for IT Managers, Auditors and Investigators, Techno Security's Guide to E-Discovery and Digital Forensics: A Comprehensive Handbook along with Alternate Data Storage.
Andre ross -
Andre Ross is a computer forensics researcher and practitioner. He was first to discover the impact of wear-levelling in NAND Flash Devices on computer forensics. Andre is the Director of Elvidence Pty. Limited, a computer forensic firm located in Sydney, Australia. Prior starting his own firm, for nearly a decade Andre worked as a computer crime detective at the New South Wales Police in Sydney, Australia. After he finished his police career in 2010, Andre lived in Russia for four years, helping PwC, EY and KPMG build their regional computer forensic practises. Andre has Masters Degree in Information Systems Security and multitude of IT industry certifications.
He writes on his Digfor blog, on various topics related to forensic analysis and digital evidence.
Bradley schatz -
Bradley Schatz was the Director of Schatz Forensic, a computer forensics firm based in Brisbane, Australia. Dr. Schatz received his Ph.D. in Computer Forensics at the Queensland University of Technology (QUT) in 2007. The primary subject of his doctorate, which was titled "Digital Evidence: Representation and assurance", was the role of representation in computer foresics.
In addition to being an active practitioner, Dr. Schatz is an adjunct Associate Professor at QUT, where he continues his program of research in computer forensics, supervises a doctoral student, and regularly lectures on computer forensics. His research focus lies in scalable approaches to analysing evidence and volatile memory acquisition.
Dr. Schatz has released one computer forensics tool, called pasco2, the purpose of which is to interpret the internet explorer index.dat file format.
Mantech -
The ManTech International Corporation is a large and diverse company that has one group focused on computer forensics. This group has written and maintains the mdd memory imaging tool.
Summer Internships
Each summer the CYBER group, part of ManTech Security and Mission Assurance, offers a small number of internship positions. Based in the Washington DC area, these positions offer current college students the opportunity to both learn and practice computer forensics in the real world.
External Links
Official website
Wikipedia entry on ManTech International
Ovie carroll -
Ovie Carroll' is the Director for the Cybercrime Lab at the Department of Justice, Computer Crime and Intellectual Property Section (CCIPS). Mr. Carroll's career includes more than 31 years in law enforcement. Mr. Carroll is also a SANS Principal Instructor and co-author of SANS Forensic 500-Windows Forensic Analysis course and is an adjunct professor at George Washington University in the Masters of Forensic Science program where he teaches Internet Investigations and Interview & Interrogation.
Prior to joining the Department of Justice, Mr. Carroll was the Special Agent in Charge of the Computer Crimes Unit at the United States Postal Service, Office of Inspector General (OIG), responsible for all computer intrusion investigations within the USPS network infrastructure and for providing all computer forensic analysis in support of OIG investigations and audits as well as the deployment, installation and monitoring of technical computer surveillance equipment in support of criminal investigations.
Mr. Carroll has also served as the Chief, Computer Investigations and Operations Branch, Air Force Office of Special Investigations, Washington Field Office where he was responsible for coordinating all national level computer intrusions occurring within the United States Air Force. He has extensive field experience applying his training to a broad variety of investigations and operations.
In addition to his career fighting computer crime, Mr. Carroll has led and assisted in the planning and conduct of counterintelligence inquiries, conducted investigations into a variety of offenses including murder, fraud, bribery, theft, gangs and narcotics. He also co-hosts the Cyberspeak podcast with Bret Padres.
Cindy murphy -
Cindy Murphy is a Detective with the City of Madison, WI Police Department and has been a Law Enforcement Officer since 1985. She is a certified forensic examiner (EnCE, CCFT, DFCP), and has been involved in computer forensics since 1999. Cindy has directly participated in the examination of hundreds of hard drives, cell phones, and other items of digital evidence pursuant to criminal investigations including homicides, missing persons, computer intrusions, sexual assaults, child pornography, financial crimes, and various other crimes. She has testified as a computer forensics expert in state and federal court on numerous occasions, using her knowledge and skills to assist in the successful investigation and prosecution of criminal cases involving digital evidence. She is also a part time digital forensics instructor at Madison Area Technical College and is currently working on her Masters Degree in Forensic Computing and Cyber Crime Investigation through University College, Dublin.
Rob lee -
Rob Lee is an entrepreneur and consultant in the Washington DC area, specializing in information security, incident response, and digital forensics. Rob is currently the curriculum lead and author for digital forensic and incident response training at the SANS Institute in addition to owning his own firm. Rob has more than 15 years of experience in computer forensics, vulnerability and exploit discovery, intrusion detection/prevention, and incident response. Rob graduated from the U.S. Air Force Academy and served in the U.S. Air Force as a founding member of the 609th Information Warfare Squadron, the first U.S. military operational unit focused on information warfare. Later, he was a member of the Air Force Office of Special Investigations (AFOSI) where he led a team conducting computer crime investigations, incident response, and computer forensics. Prior to starting his own firm, he directly worked with a variety of government agencies in the law enforcement, U.S. Department of Defense, and intelligence communities as the technical lead for a vulnerability discovery and an exploit development team, lead for a cyber forensics branch, and lead for a computer forensic and security software development team. Rob was also a director for MANDIANT, a company focused on investigating advanced adversaries, such as the APT, for four years prior to starting his own business. Rob co-authored the book Know Your Enemy, 2nd Edition. Rob earned his MBA from Georgetown University in Washington DC. He was awarded the Digital Forensic Examiner of the Year from the Forensic 4Cast Awards. Rob is also an ardent blogger about computer forensics and incident response topics at the SANS Computer Forensic Blog. Rob is also a co-author of the MANDIANT threat intelligence report M-Trends: The Advanced Persistent Threat
Sean peisert -
Sean Peisert is jointly appointed as an assistant adjunct professor at UC Davis and a research scientist at Lawrence Berkeley National Laboratory where he does research in computer security. He is particularly interested in computer forensic analysis, intrusion detection, vulnerability analysis, security policy modeling, electronic voting, and empirical studies of security.
Peisert received his Ph.D., Masters and Bachelors degrees in Computer Science from the University of California, San Diego (UCSD). He was a 2007–2008 I3P Fellow and consults a bit. Previously, he was a postdoc at UC Davis, was a postdoc and lecturer in the Computer Science and Engineering department at UCSD, was a computer security researcher at the San Diego Supercomputer Center (SDSC), and co-founded a software company.
Peisert's home page is https://www.cs.ucdavis.edu/~peisert/
He gave the keynote address at IEEE/SADFE-2008 and was Program Committee Co-Chair of IEEE/SADFE-2009. His interests in forensics also extend to e-voting forensics as well.
On the MediaWiki version of Forensics Wiki, Peisert was speisert.
David kovar -
David Kovar has been providing IT and software engineering consulting services for over twenty years. He has also been heavily involved with domestic and international search and rescue for the last fifteen years. The SAR investigations mingled with IT experience and led slowly into computer forensics with side trips into executive protection, flying, riding, emergency services, and some other random things that makes for a rather … diverse … resume.
CISSP, CCE, EnCE, CA Private Investigator License No: 00025048, etc, etc, etc.
Blog
integriography.wordpress.com
Tools
analyzeMFT - An open source MFT analysis tool written in Python.
Drew fahey -
Drew Fahey, VP of Products at Blackbag Technologies where oversees all product development. Drew is somewhat a computer nerd (just as Earth is somewhat a planet). He has spent over fifteen years conducting incident response and forensic investigations as both a federal agent with AFOSI and as a consultant. He was the creator of the Helix Live CD. He holds several industry certifications and a BS degree from Texas State University. If he was not so dedicated to building the best forensic software for BlackBag, he would be starring as the next Chuck, skiing in Colorado or playing Call of Duty.