Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20112

General Discussion: Chromebook forensics

$
0
0
I understand installing applications to a running machine is generally not preferred due to the changes that might/will occur, but Chromebooks seem to be falling into a similar category as smartphones in terms of encryption of user data. I am curious if Chromebooks might eventually be accessible in the way that some forensic programs capture Android devices: by installing a local application on removable media. I only work in civil litigation, so generally speaking the user name and password are always made available when possible. Also, I am wondering if a software package could be developed that, once installed to an SD card on a Chromebook, for example, could create and write an .ISO file or VMWare .VMK file to removable media of the entire Chromebook device contents. I would assume the resulting .ISO file or .VMK would still have the same encryption in place on stored user data, but then one could run the .ISO or .VMK file on another machine for examination.

Viewing all articles
Browse latest Browse all 20112

Trending Articles