boonlia

boonlia



Smack your head with USN Journal: Everything you ever wanted to know about this forensic artifact

Starting with NTFS V 3.0 (Also known as NTFS 5.0) Microsoft introduced several new features in the file system to make it more robust, reliable and efficient. This included Support for disk quotas, EFS, Sparse files, reparse points and Update sequence number (USN) journaling. While NTFS v 3.0 supports all these features the actual implementation […]

Read More »

Just a poster on memory forensics

Please click on the link below to download the poster on Memory forensics syn_volatilty

Read More »
Microsoft

Microsoft – Snake biting its own tail

How important is it to have an update release properly tested before releasing? Probably Microsoft overlooked the fact while releasing the patch ( KB 2756920) on 8th of January 2013. The Patch was released to rectify the vulnerability existed in Dot net framework 3.5.1 as mentioned at http://technet.microsoft.com/en-us/security/bulletin/ms13-004. This vulnerability allowed the attacker to raise the privilege level (Privilege […]

Read More »
VSS

Volume Shadow Copy as an aid to forensic investigations

While conducting forensics examinations I have come across several instances where past activity record on the system had proved helpful. Volume Shadow copy forensics is one of them. What is Volume shadow copy service (VSS):  Also known as volume snapshot service; the feature was introduced with Windows XP. The Idea was to create a backup […]

Read More »
Living in past glory

Living in the past glory

    Hello sir! Good noon.. I said as i entered the office of this gentleman. He had been one of my ideals and i do admire him for his thinking process, Cool headedness, Ways of handling business and knowledge. Mr. Praful Mehta, Owns a business that spreads across 3 states and deals in heavy […]

Read More »
Internet Forensics

internet forensics judgment: An analysis of options available for better judgment

Shri     This morning when I checked my alerts from Google I found something of technical interest. This was a case decided by the judiciary in favor of convict that had resulted in mass criticism and media even shouting that New York court of appeals rules that looking at child pornography is not a […]

Read More »
wireless-tower-black-clip-art-thumb3234673

Dangers of Wireless: A note on Indian Scenario

Shri Its long that I have actually written anything. Rather I must say I had been feeling incapable of writing quality stuff and this had been putting me on hold. Lately I have been in touch with a person who is struggling with cancerous brain tumor. My interaction with him encouraged me to dive deep into […]

Read More »