Computer Systems Forensic Analysis

Applied Cryptography Robust Software Quantum Safety Machine Learning Applied to Security Analysis and Exploration of Vulnerabilities Computer Systems Forensic Analysis Reverse Engineering Identification, Authentication and Authorization Secure Execution Environments Direito da Organização e da Segurança

Computer Systems Forensic Analysis
Overview of Cybercrime
Introduction to Digital Forensics
Obtaining Evidences
Data Organization
Storage Devices
Volumes and Partitions
RAM Analysis
Mobile Forensics
Open Source INTelligence
Documentation and Reporting

Powered by GitBook

On this page

Physical acquisition

PreviousLogical acquisition NextHashing

Last updated 10 months ago

How it works?

data is recovered in raw form.
- copy bit by bit.
- provides a lot of data, including deleted data (not overwritten).
- requires decoding of the raw data.
  - CPU intensive.
  - software may not be able to decode everything.
  - cannot be done if device is encrypted.

What data can be retrieved in a physical acquisition?