Git-Mirrors/sec-pentesting-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/sec-pentesting-toolkit.git synced 2025-05-17 14:10:31 -04:00
Code Issues Projects Releases Packages Wiki Activity
sec-pentesting-toolkit/Forensics
History
bt3 0077bcf0bf Starting organizing my forensics material
2015-11-26 10:28:40 -08:00
..
readings Starting organizing my forensics material 2015-11-26 10:28:40 -08:00
scripts Starting organizing my forensics material 2015-11-26 10:28:40 -08:00
README.md Starting organizing my forensics material 2015-11-26 10:28:40 -08:00
volatility.md Starting organizing my forensics material 2015-11-26 10:28:40 -08:00

README.md

Forensics

Disk Forensics

dd

strings

$ strings /tmp/mem.dump | grep BOOT_
$ BOOT_IMAGE=/vmlinuz-3.5.0-23-generic

scalpel

TrID

binwalk

foremost

ExifTool

Hex editors

dff

CAINE

The Sleuth Kit

Memory Forensics

memdump

Volatility: Analysing Dumps

Scripts

PDFs

Tools to test a PDF file:

  • pdfid
  • pdf-parser

References