±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 4 Overall: 36205
New Yesterday: 1 Visitors: 208

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Tor browser in linux

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


Tor browser in linux

Post Posted: Nov 09, 19 10:57

TBB is designed to 'avoid the disk' but I`ve read that this isn't always the case. If a suspect had downloaded TBB onto a Linux OS and ran it a few times, would it be possible to recover any helpful artefacts about their usage of TBB? Thanks  


Re: Tor browser in linux

Post Posted: Nov 10, 19 21:45

I would love to do the write up to answer your question, bit someone already beat me to it. Here's a very nice article covering Forensic examination of Tor on Linux. blog.torproject.org/fo...-tor-linux  


Re: Tor browser in linux

Post Posted: Nov 10, 19 22:17

Thanks Soviet. That work is interesting but from 6 years ago. The more recent papers I've read seem to say very little is written to disk although RAM can offer more of note. Do you have any hands on experience in relation to my query?  

Page 1 of 1