Ask reliability for...
 
Notifications
Clear all

Ask reliability for evidence web browser action ???

3 Posts
2 Users
0 Likes
224 Views
(@xsmaylo)
Posts: 6
Active Member
Topic starter
 

Dear All

I testing private browsing in modern web browser (ie,ff,chrome,safari) on
windows 7
I testing user use private mode in web browser and after end of private session what evidence
store on ram,hard disk and window page file ?

My Lab only use one image file that have all browser store in that
My professor ask me "How you make your that data not contamination?

My solution is…..

1.separate one images per one web browser
2.use disk wiping for each web browser

my question What solution in best digital forensic ? if i want to make sure my lab test is reliability

Thank you for you come and reading

 
Posted : 29/07/2014 1:02 pm
(@joe_t)
Posts: 14
Active Member
 

Dear All

I testing private browsing in modern web browser (ie,ff,chrome,safari) on
windows 7
I testing user use private mode in web browser and after end of private session what evidence
store on ram,hard disk and window page file ?

My Lab only use one image file that have all browser store in that
My professor ask me "How you make your that data not contamination?

My solution is…..

1.separate one images per one web browser
2.use disk wiping for each web browser

my question What solution in best digital forensic ? if i want to make sure my lab test is reliability

Thank you for you come and reading

Wouldn't it be easiest to
- set up a virtual machine with all bowsers pre-installed
- take a snapshot of the state before browsing
- browse with one browser
- take a second snapshot (named after the browser being tested)
- revert to the "clean" snaphot
- browse with the second browser
- take another snapshot (named after the browser being tested)
- and so on…

and then read all of the snapshots into the forensic tool of your choice?

 
Posted : 29/07/2014 1:37 pm
(@xsmaylo)
Posts: 6
Active Member
Topic starter
 

Thank you joe_t

i will try your solution ^/\^

 
Posted : 29/07/2014 1:42 pm
Share: