5 ms·

I work on the signal side of discovery. What do you have in mind?

• kovar 16y ago
  One question that keeps coming to mind for me - how could you take a forensically sound image of a hard drive and prepare it for processing by a wide variety of tools in a non-serial manner? We spend a lot of our time searching through hard drive images... The current state of the art for indexing doesn't address the need to look for viruses, rootkits, keywords, CP, stego, etc etc at different stages of the investigation.
  • deleted 16y ago
    [deleted]
  • FirstHopSystems 16y ago
    Good ole stego. Manual discovery is 99% of the fun!
    • kovar 16y ago
      Manual discovery is fun, 'til you have to sift through 1TB of data looking for it, and hidden TC containers, and rootkits, and and and and... Gets tedious, and inaccurate, quickly!
      • FirstHopSystems 16y ago
        True. I've used VM's, kind of like ant farm to run images through a bunch of tests and see what happens. Most of it was hacked together. It would be interesting to see what kind stuff you could do with Cluster Computing when it comes to pulling apart everything. I've had to do static analysis of memory images paired up with FPGA's for certain types of hardware. Yeah...It drains the life out of you.
      • FirstHopSystems 16y ago
        Looking to put something together? I deal with hardware most of the time. I'm trying to get out of that world and into building applications.
        • kovar 16y ago
          Very much looking to put something together. I currently have one startup effort in the ediscovery space that I am working on, but I have cycles available to explore other options, and the desire to do so.
          • FirstHopSystems 16y ago
            I'm on the lookout for interesting projects to hack-on and forensics would feel like home. If your still looking at this thread mail me at Bcounsell1 () Gm/ail <> com.