Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions docs/afconvert.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,6 @@ tags:
- MacOS
- Audio Conversion
- Articles that need to be expanded

---
**afconvert** is part of the [AFF](aff.md) toolset. This program
can interconvert between all of the different file formats that AFF
Expand Down Expand Up @@ -86,4 +85,4 @@ computer running FreeBSD:
` md1`
` #`

We can restore filename.aff onto /dev/md1:
We can restore filename.aff onto /dev/md1:
3 changes: 1 addition & 2 deletions docs/air.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@ tags:
- MacOS
- Disk Imaging
- Anti-Forensics

---
The **Automated Image and Restore** or **AIR** is a GUI front-end to
[dd](dd.md) and [dc3dd](dc3dd.md) designed for easily
Expand All @@ -27,4 +26,4 @@ Features:

## External Links

- [Official website](https://sourceforge.net/projects/air-imager/)
- [Official website](https://sourceforge.net/projects/air-imager/)
3 changes: 1 addition & 2 deletions docs/alarmdisk.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,7 @@
---
tags:
- Articles that need to be expanded

---
**AlarmDisk™** is a freeware personal computer security monitoring
system made by [CPR Tools](cpr_tools.md). The program purports
to notify users if their drive has been powered without their knowledge.
to notify users if their drive has been powered without their knowledge.
3 changes: 1 addition & 2 deletions docs/anti_forensic_techniques.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
---
tags:
- Anti-Forensics

- Anti-Forensics
---
**Anti-forensic techniques** try to frustrate forensic investigators and their
[techniques](techniques.md).
Expand Down
1 change: 1 addition & 0 deletions docs/at_commands.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
tags:
- No Category
---

- AT and AT+ commands can be used to manually collect simple
information. This is an ideal choice for "full control" over the
communications that are sent and returned from the phone. These can
Expand Down
15 changes: 7 additions & 8 deletions docs/carbon.md
Original file line number Diff line number Diff line change
@@ -1,12 +1,11 @@
---
tags:
- Windows
- Tools
- Disk Imaging
- Write Blocker
- Data Recovery
- Commercial Software

- Windows
- Tools
- Disk Imaging
- Write Blocker
- Data Recovery
- Commercial Software
---
CARBON is a virtualized forensic analysis tool for the Windows operating
system, developed by SUMURI.
Expand All @@ -28,4 +27,4 @@ manner which protects the data from changes or alterations.

## External Links

- [Official Website](https://sumuri.com/software/Carbon/)
- [Official Website](https://sumuri.com/software/Carbon/)
1 change: 1 addition & 0 deletions docs/digital_forensics_xml_bibliography.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
tags:
- Digital Forensics XML
---

1. Garfinkel, Simson., [Automating Disk Forensic Processing with
Sleuth Kit, XML and
Python](https://simson.net/clips/academic/2009.SADFE.xml_forensics.pdf),
Expand Down
1 change: 1 addition & 0 deletions docs/disabling_macintosh_disk_arbitration_daemon.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
tags:
- No Category
---

- Start Terminal (in the Utilities folder).
- Type:

Expand Down
1 change: 1 addition & 0 deletions docs/iris_recognition.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ tags:

* [Making iris recognition more reliable and spoof resistant](https://spie.org/x14548.xml),
by Adam Czajka, Przemek Strzelczyk, and Andrzej Pacut, SPIE 2007.

- [Biometric Technology Today](https://www.sciencedirect.com/journal/biometric-technology-today)
has many articles on iris identification.
- [Introduction to Iris Recognition](https://www.cl.cam.ac.uk/~jgd1000/iris_recognition.html)
Expand Down
2 changes: 1 addition & 1 deletion docs/list_of_volatility_plugins.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
- Articles that need to be expanded
tags:
- Articles that need to be expanded
- Research
- Websites
---
Expand Down
1 change: 1 addition & 0 deletions docs/microsoft_windows.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,5 @@
tags:
- No Category
---

1. redirect [Windows](windows.md)
1 change: 1 addition & 0 deletions docs/papers.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,4 +2,5 @@
tags:
- No Category
---

1. redirect [Bibliography](bibliography.md)
1 change: 1 addition & 0 deletions docs/pysim.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ alt="pysim.jpg" />

pySIM (also called SimReader) is a relatively simple open source program
that accomplishes the following tasks:

- Downloads phonebook entries from a SIM Card
- Downloads SMS messages from a SIM Card
- Imports .txt files from other acquisitions
Expand Down
1 change: 1 addition & 0 deletions docs/reports.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
tags:
- Articles that need to be expanded
---

- *Electronic Crime Needs Assessment for State and Local Law
Enforcement,* National Institute of Justice, March 2002.
- [NCJ 186276](http://simson.net/ref/2001/NIJ-icove.pdf)
Expand Down
1 change: 1 addition & 0 deletions docs/solveit.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,7 @@ individual investigations.
from the Proceedings of the [DFRWS EU 2025 Conference](digital_forensic_research_workshop.md)

## External Links

- [SOLVE-IT GitHub repositories](https://github.com/SOLVE-IT-DF?tab=repositories)

## See Also
Expand Down
1 change: 1 addition & 0 deletions docs/storage_class_memory.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
tags:
- Bibliographies
---

- [Overview of candidate device technologies for storage-class memory](https://www.researchgate.net/publication/220498729_Overview_of_candidate_device_technologies_for_Storage-Class_Memory),
by G. W. Burr, B. N. Kurdi, J. C. Scott, C. H. Lam, K. Gopalakrishnan,
R. S. Shenoy, IBM J. RES. & DEV. VOL. 52 NO. 4/5 JULY/SEPTEMBER 2008