Combating Anti-forensics: Timestomping
Timestomping When conducting a forensic investigation, it is crucial to understand the timeline of events that occurred on a system. An investigator can utilize timestamps to gather information about file creation dates, modification dates, access dates, and more. However, if someone wants to complicate an investigation, they could obscure the metadata of certain files to…
Combating Anti-forensics: Encryption
So much information can be gathered about someone through the data they leave behind on electronic devices they’ve used. But all of this information is useless if the investigator cannot get access to it. A common anti-forensics measure that many people use is encryption. If an investigator comes across a piece of evidence that is…
Combating Anti-forensics: Secure Deletion
Anti-forensics A lot of people aren’t fully aware of the trail they leave behind after using an electronic device. This makes a digital forensic investigation very useful when trying to piece together events that occurred. Some people, however, will try to use various techniques to cover their tracks. This practice is known as anti-forensics. If…
Wise Forensics 