Don’t get me wrong, there is never enough time, but some things are worth digging for and verifying!
So… that is why I am normally opposed to those who use tools and live by what the tools report without digging in to verify. Is it the vendor’s fault – No! The phones are hard to keep up with and the version updates on each OS make it even harder, but examiners like to press the “Find Evidence” button and that makes me shiver. Normally, I have a hard time seeing the good side of tool output because the artifacts are often so convoluted and misleading to examiners who don’t know any better. So, it’s safe to say that I spend a lot of time becoming familiar with the tools, learning what I am able to trust and where they ultimately fail me. I also use these tools for my regular job, where I aim to find gaps and then fill them with my own methods and tools. I test tools thoroughly and include the best ones in the SANS FOR585 Advanced Smartphone Forensic course that I co-author.
#OXYGEN FORENSIC SOFTWARE MANUAL UPDATE#
I have been using Oxygen for years and this last update has really impressed me. I am just really impressed with the bounds Oxygen is making in the mobile world. First things first – this is NOT a sponsored blog. See what I did there? I am getting craftier with these blog titles.
0 kommentar(er)
