cleanup_wip

forensicswiki · Jan 10, 2023 · 934fe8c · 934fe8c
1 parent c4b1769
commit 934fe8c
Show file tree

Hide file tree

Showing 15 changed files with 640 additions and 10,714 deletions.
diff --git a/docs/anti_forensic_techniques.md b/docs/anti_forensic_techniques.md
@@ -24,8 +24,7 @@ like any [tool](tools.md) they can be abused.
 
 ### Secure Data Deletion
 
-[Secure Deletion](secure_data_deletion.md) data, so that it
-cannot be restored with forensic methods.
+Secure Deletion data, so that it cannot be restored with forensic methods.
 
 Overwriting programs typically operate in one of three modes:
 
@@ -75,11 +74,10 @@ could not be reliably constructed.
 
 For example, [Timestomp](timestomp.md) will overwrite
 [NTFS](ntfs.md) “create,” “modify,” “access,” and “change”
-timestamps ([metasploit](metasploi.md). [The Defiler’s
-Toolkit](the_defiler’s_toolkit.md) can overwrite inode
+timestamps (metasploit). The Defiler’s Toolkit can overwrite inode
 timestamps and deleted directory entries on many Unix systems;
 timestamps on allocated files can also be modified using the Unix touch
-command ([The Grugq](the_grugq.md).
+command ([The Grugq](the_grugq.md)).
 
 ### Preventing Data Creation
 
@@ -206,11 +204,11 @@ to that by destroying evidence, for example.
 
 ### Casper
 
-![](Grml.png "Grml.png") mounted root file system on the [hard drive](hard_drive.md)
+Grml mounted root file system on the [hard drive](hard_drive.md)
 [Casper](http://bromavilleherald.com/index.php/Casper_boot_process) is a
 set of scripts used to enable Linux-based distributions to boot from
 removable media. Casper scripts will search for the root file system
-(typically [SquashFS](squashfs.md) on the local data storage
+(typically SquashFS on the local data storage
 media during the boot, mount it, and execute */sbin/init* program on
 mounted root. Most forensic Linux distributions based on
 [Ubuntu](ubuntu.md) and Debian lack of
@@ -239,10 +237,6 @@ Henrique, G. Wendel, Anti Forensics: Making computer forensics hard,
 Code Breakers III, São Paulo, Brazil, Setember 2006.
 [3](http://ws.hackaholic.org/slides/AntiForensics-CodeBreakers2006-Translation-To-English.pdf)
 
-## See also
-
-- [Anti-forensics tools](antiforensics_tools.md)
-
 ## Externals Links
 
 * [Anti-Forensics: The Next Step in Digital Forensics Tool Testing](https://www.digitrace.de/veroeffentlichung-2/fachliteratur/84-anti-forensics-the-next-step-in-digital-forensics-tool-testing),
@@ -258,7 +252,7 @@ Code Breakers III, São Paulo, Brazil, Setember 2006.
   Little over 3hr of video on the subject of anti-forensic techniques
 * [Linux for computer forensic investigators: problems of booting trusted operating system](http://www.computer-forensics-lab.org/pdf/Linux_for_computer_forensic_investigators_2.pdf)
 * [Low Down and Dirty: Anti-forensic Rootkits](https://www.blackhat.com/presentations/bh-jp-06/BH-JP-06-Bilby-up.pdf),
-  by [Darren Bilby](darren_bilby.md), Blackhat Japan 2006
+  by Darren Bilby, Blackhat Japan 2006
 * [One-byte Modification for Breaking Memory Forensic Analysis](https://media.blackhat.com/bh-eu-12/Haruyama/bh-eu-12-Haruyama-Memory_Forensic-Slides.pdf),
   by Takahiro Haruyama, Hiroshi Suzuki, March 14-16, 2012
 

diff --git a/docs/data_storage_media.md b/docs/data_storage_media.md
@@ -7,7 +7,7 @@ different properties regarding forensic investigation.
 
 ## Media
 
-- [Caches](cache.md)
+- Caches
 - RAM, ROM, Flash
 - Floppy Disks
 - Optical media: CDs, DVDs, CD-RWs, ...

diff --git a/docs/fat.md b/docs/fat.md
@@ -269,7 +269,7 @@ used in electronic devices with miniature hard drives.
 Examples of devices in which FAT is utilized include:
 
 * [USB](usb.md) thumb drives
-* [Digital cameras](digital_camera.md)
+* Digital cameras
 * Digital camcorders
 * Portable audio and video players
 * Multifunction [printers](printers.md)
@@ -687,13 +687,13 @@ object.
 * [Wikipedia: ExFAT](https://en.wikipedia.org/wiki/ExFAT)
 * [exFAT File System](http://www.active-undelete.com/xfat_volume.htm)
 * [Reverse Engineering the Microsoft exFAT File System](https://www.sans.org/white-papers/33274/),
-  by [Robert Shullich](robert_shullich.md), December 1, 2009
+  by Robert Shullich, December 1, 2009
 * [Extended FAT file system](https://paradigmsolutions.files.wordpress.com/2009/12/exfat-excerpt-1-4.pdf),
-  by [Jeff Hamm](jeff_hamm.md), December 2009
+  by Jeff Hamm, December 2009
 * [Demystifying the Microsoft Extended FAT File System (exFAT)](https://www.slideshare.net/overcertified/demystifying-the-microsoft-extended-fat-file-system-exfat),
-  by [Robert Shullich](robert_shullich.md), September 20, 2010
+  by Robert Shullich, September 20, 2010
 * [Windows Phone 7 : Implications For Digital Forensic Investigators](http://aut.researchgateway.ac.nz/bitstream/handle/10292/4123/LeY.pdf),
-  by [Yung Anh Le](yung_anh_le.md), 2012
+  by Yung Anh Le, 2012
 
 ### textFAT
 

diff --git a/docs/file_carving_bibliography.md b/docs/file_carving_bibliography.md
@@ -94,7 +94,7 @@ of sector-scanning forensic tools.",
 
 ## Evaluations
 
-* [Measuring and Improving the Quality of File Carving Methods](media:kloet_2007.pdf.md),
+* [Measuring and Improving the Quality of File Carving Methods](https://github.com/libyal/documentation/blob/main/Thesis%20-%20Measuring%20and%20Improving%20the%20Quality%20of%20File%20Carving%20Methods.pdf)
   by S.J.J. Kloet , Master's thesis, Eindhoven University of Technology, August 2007
 
 ## See also