Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20112

General Discussion: Find evidence of a file viewed from within a tar file

$
0
0
Quote:: [...] I want to say with some certainty that the attacker did not view them.[...] In my opinion, it is very hard to prove the non-existence or non-occurrence of something when it comes to digital forensics. Your "some certainty" will have to come from basically searching as previously noted by athulin. You could try carving for known and unique portions of the sensitive parts on the target device.

Viewing all articles
Browse latest Browse all 20112

Trending Articles