Skip to content

Commit 8d6cafe

Browse files
committed
cleanup_wip
1 parent 6600392 commit 8d6cafe

File tree

87 files changed

+796
-1226
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

87 files changed

+796
-1226
lines changed

docs/academic_forensics_programs_graduate_level.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,5 +84,5 @@ tags:
8484

8585
- [AAFS](http://www.aafs.org/default.asp?section_id=resources&page_id=colleges_and_universities)
8686
- [Digital Forensics Association List](http://www.digitalforensicsassociation.org/formal-education/)
87-
- [Forensics Focus List](https://www.forensicfocus.com/computer-forensics-education-directory)
87+
- [Forensics Focus List](https://forensicfocus.com/computer-forensics-education-directory)
8888
- [Master's Thesis: The Development of a Standard Digital Forensics Master's Curriculum](http://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=1010&context=techmasters&sei-redir=1#search=%22katie%20strzempka%20thesis%22)

docs/advanced_format.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,4 +57,4 @@ utility (this applies only to drives from Western Digital):
5757
* [A Tom's Hardware Review of the WD Caviar Green Drives](http://www.tomshardware.com/reviews/green-terabyte-1tb,2078-2.html)
5858
* [ATA 4 KiB sector issues (good summary from Linux ATA wiki)](https://ata.wiki.kernel.org/index.php/ATA_4_KiB_sector_issues)
5959
* [4K-sector drives and Linux (LWN.net)](http://lwn.net/Articles/377895/)
60-
* [WD6400AARS-00Y5B1 does not provide sector size info (smartmontools ticket)](http://sourceforge.net/apps/trac/smartmontools/ticket/62)
60+
* [WD6400AARS-00Y5B1 does not provide sector size info (smartmontools ticket)](https://sourceforge.net/apps/trac/smartmontools/ticket/62)

docs/aes.md

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,11 @@
11
---
22
tags:
3-
- Encryption
4-
- Anti-Forensics
5-
- Articles that need to be expanded
3+
- Articles that need to be expanded
4+
- Encryption
65
---
7-
The **Advanced Encryption Standard** or AES, is an
8-
[encryption](encryption.md) algorithm.
6+
The **Advanced Encryption Standard** or AES, is an [encryption](encryption.md)
7+
algorithm.
98

109
## External Links
1110

12-
- [Wikipedia: AES](http://en.wikipedia.org/wiki/Advanced_Encryption_Standard)
13-
- [Using AES Encryption for Hard Disk Encryption](http://secude.com/htm/805/en/White_Paper_Section%3A_Full_Disk_Encryption.htm)
14-
11+
* [Wikipedia: Advanced Encryption Standard](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard)

docs/anti_forensic_techniques.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -127,7 +127,7 @@ combines both approaches with multiple layers of encryption, so that no
127127
intermediary knows both ends of the communication and the plaintext
128128
content.
129129

130-
*More information: [Tor](tor.md) and [VPN](vpn.md).*
130+
*More information: Tor and [VPN](vpn.md).*
131131

132132
### Program Packers
133133

docs/apple_file_system_(apfs).md

Lines changed: 10 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,19 @@
11
---
22
tags:
3-
- File Systems
4-
- MacOS
3+
- File Systems
4+
- MacOS
55
---
6-
APFS, or Apple File System, is the file system designed by [Apple
7-
Computer](http://www.apple.com) to supersede [HFS+](hfs+.md) and
8-
take advantage of flash/SSD storage and native encryption support. APFS
9-
also introduced file system snapshots, support for sparse files, and
10-
greater time stamp granularity.
6+
APFS, or Apple File System, is the file system designed by [Apple](apple_inc.md)
7+
to supersede [HFS+](hfs+.md) and take advantage of flash/SSD storage and native
8+
encryption support. APFS also introduced file system snapshots, support for
9+
sparse files, and greater time stamp granularity.
1110

1211
It was announced at the Apple Worldwide Developer Conference (WWDC) in
1312
2016 and is meant to be used with watchOS, iOS, tvOS, and macOS. A
1413
Developer Preview version was first released with macOS Sierra 10.12.
1514
APFS became the default file system with the release of macOS High
1615
Sierra 10.13 released to the public on September 25, 2017.
1716

18-
19-
2017
## Features
2118

2219
Max file size of 2<sup>63</sup> bytes was mantinted from
@@ -30,8 +27,6 @@ Max file size of 2<sup>63</sup> bytes was mantinted from
3027
- Fast directory sizing (more efficient total space computation of a
3128
directory)
3229

33-
34-
3530
<CENTER>
3631
<TABLE Border=1 cellpadding=2 cellspacing=0 width=75%>
3732
<TR>
@@ -156,16 +151,9 @@ Yes (native)
156151
</table>
157152
</CENTER>
158153

159-
160-
161154
## External Links
162155

163-
- [Apple File System Guide -
164-
Introduction](https://developer.apple.com/library/content/documentation/FileManagement/Conceptual/APFS_Guide/Introduction/Introduction.html)
165-
- [Introducing Apple File
166-
System](http://devstreaming.apple.com/videos/wwdc/2016/701q0pnn0ietcautcrv/701/701_introducing_apple_file_system.pdf)
167-
- [Slides from filesystem talk at MacSysAdmin 2016 by Rich
168-
Trouton](https://derflounder.wordpress.com/2016/10/05/slides-from-the-whats-new-in-file-system-session-at-macsysadmin-2016/)
169-
- [Creating APFS volumes by Howard
170-
Oakley](https://eclecticlight.co/2017/04/08/how-to-make-your-own-apfs-volume/)
171-
156+
* [Apple File System Guide - Introduction](https://developer.apple.com/library/content/documentation/FileManagement/Conceptual/APFS_Guide/Introduction/Introduction.html)
157+
* [Introducing Apple File System](http://devstreaming.apple.com/videos/wwdc/2016/701q0pnn0ietcautcrv/701/701_introducing_apple_file_system.pdf)
158+
* [Slides from filesystem talk at MacSysAdmin 2016 by Rich Trouton](https://derflounder.wordpress.com/2016/10/05/slides-from-the-whats-new-in-file-system-session-at-macsysadmin-2016/)
159+
* [Creating APFS volumes by Howard Oakley](https://eclecticlight.co/2017/04/08/how-to-make-your-own-apfs-volume/)

docs/apple_iphone.md

Lines changed: 24 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
---
22
tags:
3-
- Articles that need to be expanded
3+
- Articles that need to be expanded
4+
- Mobile
45
---
5-
The **iPhone** is a smartphone made by [Apple
6-
Inc.](apple_inc..md) and sold with service through AT&T. It can
7-
be used to send/receive [email](email.md) (see [IPhone Mail
8-
Header Format](iphone_mail_header_format.md), keep schedules,
9-
surf the web, and view videos from YouTube. A large number of forensic
10-
products can process iPhones, see Tools section.
6+
The **iPhone** is a smartphone made by [Apple Inc.](apple_inc..md) and sold
7+
with service through AT&T. It can be used to send/receive [email](email.md)
8+
(see [IPhone Mail Header Format](iphone_mail_header_format.md), keep schedules,
9+
surf the web, and view videos from YouTube. A large number of forensic products
10+
can process iPhones, see Tools section.
1111

1212
In December 2009, Nicolas Seriot presented a paper
1313
[1](http://seriot.ch/resources/talks_papers/iPhonePrivacy.pdf) in
@@ -19,14 +19,12 @@ Store does not allow in any application it distributes).
1919

2020
## Tools
2121

22-
- [Belkasoft Evidence Center](https://belkasoft.com/ec) by
23-
[Belkasoft](belkasoft.md) can make iPhone logical acquisition
24-
and analyze iOS backups and dumps.
25-
- Black Bag Technology Mobilyze
26-
- [Cellebrite
27-
UFED](http://www.cellebrite.com/forensic-solutions/ios-forensics.html)
28-
- [Elcomsoft Mobile Forensic
29-
Bundle](https://www.elcomsoft.com/emfb.html) performs physical,
22+
- [Belkasoft Evidence Center](https://belkasoft.com/ec)
23+
by [Belkasoft](belkasoft.md) can make iPhone logical acquisition and analyze
24+
iOS backups and dumps.
25+
- Cellebrite BlackBag Technology Mobilyze
26+
- [Cellebrite UFED](http://www.cellebrite.com/forensic-solutions/ios-forensics.html)
27+
- [Elcomsoft Mobile Forensic Bundle](https://www.elcomsoft.com/emfb.html) performs physical,
3028
logical and over-the-air acquisition.
3129
- EnCase Neutrino
3230
- [FTS iXAM](http://www.ixam-forensics.com/)
@@ -35,8 +33,7 @@ Store does not allow in any application it distributes).
3533
- [iphone-dataprotection](http://code.google.com/p/iphone-dataprotection/);
3634
a set of tools that can image and decrypt an iPhone. The tools can
3735
even brute-force the iPhone's 4-digit numerical password.
38-
- [iOS Forensic Research](http://www.iosresearch.org). [Jonathan
39-
Zdziarski](jonathan_zdziarski.md) has released tools that will
36+
- [iOS Forensic Research](http://www.iosresearch.org). [Jonathan Zdziarski](jonathan_zdziarski.md) has released tools that will
4037
image iPhones, iPads and iPod Touch. (law enforcement only).
4138
- [Katana Forensics Lantern](http://katanaforensics.com/products/)
4239
- [libimobiledevice](http://www.libimobiledevice.org/) is a library with
@@ -48,49 +45,31 @@ Store does not allow in any application it distributes).
4845
- MacLock Pick
4946
- [Micro Systemation .XRY](.xry.md)
5047
- Mobile Sync Browser
51-
- [Nuix Desktop](nuix_desktop.md) and [Proof
52-
Finder](proof_finder.md) can detect and analyse many databases
48+
- [Nuix Desktop](nuix_desktop.md) and [Proof Finder](proof_finder.md) can detect and analyse many databases
5349
from iOS and iPhones and can directly ingest HFSX dd images.
5450
- [Oxygen Forensic Suite](oxygen_forensic_suite.md)
5551
- Paraben Device Seizure
5652
- [SpyPhone](https://github.com/nst/spyphone)
5753

5854
## Publications
5955

60-
- Gómez-Miralles, Arnedo-Moreno. [Versatile iPad forensic acquisition
61-
using the Apple Camera Connection
62-
Kit.](http://openaccess.uoc.edu/webapps/o2/bitstream/10609/11862/1/iPadForensics.pdf)
56+
- Gómez-Miralles, Arnedo-Moreno. [Versatile iPad forensic acquisition using the Apple Camera Connection Kit](http://openaccess.uoc.edu/webapps/o2/bitstream/10609/11862/1/iPadForensics.pdf),
6357
Computers And Mathematics With Applications, Volume 63, Issue 2, 2012,
6458
pp.544-553.
6559

6660
## External Links
6761

6862
- [Official web site](http://www.apple.com/iphone/)
6963
- [Wikipedia: iPhone](http://en.wikipedia.org/wiki/IPhone)
70-
- [Wikipedia: IOS
71-
jailbraking](http://en.wikipedia.org/wiki/IOS_jailbreaking)
64+
- [Wikipedia: IOS jailbraking](http://en.wikipedia.org/wiki/IOS_jailbreaking)
7265
- [The iPhone Wiki](http://theiphonewiki.com/wiki/Main_Page)
73-
- [Slashdot: Malware Could Grab Data From Stock
74-
iPhones](http://it.slashdot.org/story/09/12/04/0413235/Malware-Could-Grab-Data-From-Stock-iPhones?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29)
75-
- [Apple iOS
76-
Privacy](http://seriot.ch/resources/talks_papers/iPhonePrivacy.pdf),
77-
[slides hash days
78-
presentation](http://seriot.ch/resources/talks_papers/ios_privacy_hashdays.pdf),
66+
- [Slashdot: Malware Could Grab Data From Stock iPhones](http://it.slashdot.org/story/09/12/04/0413235/Malware-Could-Grab-Data-From-Stock-iPhones?from=rss&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+Slashdot%2Fslashdot+%28Slashdot%29)
67+
- [Apple iOS Privacy](http://seriot.ch/resources/talks_papers/iPhonePrivacy.pdf),
68+
[slides hash days presentation](http://seriot.ch/resources/talks_papers/ios_privacy_hashdays.pdf),
7969
by [Nicolas Seriot](nicolas_seriot.md), in November 2010.
80-
- [iPhone
81-
Forensics](https://viaforensics.com/resources/white-papers/iphone-forensics/),
82-
by [Andrew Hoog](andrew_hoog.md) and [Katie
83-
Strzempka](katie_strzempka.md), in November 2010. Covers 13x
84-
iOS forensic tools and provides detailed information on the results
85-
for the iPhone 3G.
86-
- [Evolution of iOS Data Protection and iPhone Forensics: from iPhone OS
87-
to iOS
88-
5](http://media.blackhat.com/bh-ad-11/Belenko/bh-ad-11-Belenko-iOS_Data_Protection.pdf),
89-
by [Andrey Belenko](andrey_belenko.md) and [Dmitry
90-
Sklyarov](dmitry_sklyarov.md), 2011
91-
- [Forensic analysis of iPhone
92-
backups](http://www.exploit-db.com/wp-content/themes/exploit/docs/19767.pdf),
70+
- [Evolution of iOS Data Protection and iPhone Forensics: from iPhone OS to iOS 5](http://media.blackhat.com/bh-ad-11/Belenko/bh-ad-11-Belenko-iOS_Data_Protection.pdf),
71+
by [Andrey Belenko](andrey_belenko.md) and [Dmitry Sklyarov](dmitry_sklyarov.md), 2011
72+
- [Forensic analysis of iPhone backups](http://www.exploit-db.com/wp-content/themes/exploit/docs/19767.pdf),
9373
by Satish B, 2012
94-
- [Forensic Analysis on iOS
95-
Devices](http://www.sans.org/reading_room/whitepapers/forensics/forensic-analysis-ios-devices_34092),
74+
- [Forensic Analysis on iOS Devices](http://www.sans.org/reading_room/whitepapers/forensics/forensic-analysis-ios-devices_34092),
9675
by [Tim Proffitt](tim_proffitt.md), November 5, 2012

docs/at_commands.md

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -192,6 +192,5 @@ This returns the phone number (Samsung).
192192
* [AT+C Command Set of GSM](http://gatling.ikk.sztaki.hu/~kissg/gsm/index.html)
193193
* [Alexander Traud's GSM pages](http://www.traud.de/gsm/atex.htm)
194194
* [AT Test Commands](http://www.anotherurl.com/library/at_test.htm)
195-
* [Gammu Phone Protocols](http://wammu.eu/docs/manual/protocol/index.html)
196195
* [ETSI-3GPP Standards](http://webapp.etsi.org/key/key.asp?GSMSpecPart1=27&GSMSpecPart2=007)
197196
* [Even more Samsung AT Commands](http://gatling.ikk.sztaki.hu/~kissg/gsm/atscan/unprocessed/SamsungS105v1_6h.txt)

docs/bkf_recovery_tool.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,4 +29,4 @@ from your corrupt BKF files.
2929
## External Links
3030

3131
[Official
32-
Website](https://www.sysinfotools.com/recovery/bkf-recovery.php)
32+
Website](https://sysinfotools.com/recovery/bkf-recovery.php)

0 commit comments

Comments
 (0)