|
Media forensic investigation :
ESALAB invested in appropriate media and OS analysis softwares such as ENCASE V6® (new release on Jan 2007) edited by GUIDANCE Software :
- Data recovery and acquisition from Hard Drives, PDA, CD and DVD, USB keys, ..
The FASTBLOC 2 write-blocking hardware tool allows fast and safe hard-drive media acquisition;
- Disk image creation for evidence safekeeping and verbatim copy generation,
- Files inventory, files signature checking, deleted files and slack spaces recovery, researches by type, keywords and regular expressions researches, hidden partitions or files discoveries,..
- Picture, photo and video files full inventory, preview of multimedia contents;
- Data analysis from email softwares such as Outlook : e-mails, attachments, contact directory,..
- Analyse of Internet activities : IE cache, bookmarks, inputs, history logs,..
- Windows registries and Windows artifacts investigation,
- Password cracking, booted hard-drive exploration from a system disk clone,..
- Program launching tests, setting and configuration examination, activity records (logs) examination.
Data processing :
Computers are filled with large volume of data, sometimes not used in the evidence research process. These data can involve a range from commercial application databases to industrial measurement acquisitions.
- Database exploration,
- Data processing program development and implementation,
- Specific treatments, output visualization.
Characterization of malfunction, non-conformity or performance flaw, platform tests :
- Testing protocol development,
- Test frameworks, test programs development and implementation,
- Specific processings, test dataset generation, output analysis.
Automated CD/DVD content Inventory :
A full inventory is sometimes necessary in cases involving several hundreds or even thousands of CD/DVD media containing softwares, games, musics or movies.
It must be established precisely if these media are copies intended to be sold as counterfeit products or if they are part of a private collection or data.
The goal of this project is to assess and test existing hardwares that can handle automatic batch processing for large workload of media content. Specific analysis and inventory generation softwares should also be evaluated to work with an automatic loader device. Specific developement might be considered to fulfill the requirements.
Here are some tested hardware :
|
