Dear All
I testing private browsing in modern web browser (ie,ff,chrome,safari) on
windows 7
I testing user use private mode in web browser and after end of private session what evidence
store on ram,hard disk and window page file ?
My Lab only use one image file that have all browser store in that
My professor ask me "How you make your that data not contamination?
My solution is…..
1.separate one images per one web browser
2.use disk wiping for each web browser
my question What solution in best digital forensic ? if i want to make sure my lab test is reliability
Thank you for you come and reading
Dear All
I testing private browsing in modern web browser (ie,ff,chrome,safari) on
windows 7
I testing user use private mode in web browser and after end of private session what evidence
store on ram,hard disk and window page file ?My Lab only use one image file that have all browser store in that
My professor ask me "How you make your that data not contamination?My solution is…..
1.separate one images per one web browser
2.use disk wiping for each web browsermy question What solution in best digital forensic ? if i want to make sure my lab test is reliability
Thank you for you come and reading
Wouldn't it be easiest to
- set up a virtual machine with all bowsers pre-installed
- take a snapshot of the state before browsing
- browse with one browser
- take a second snapshot (named after the browser being tested)
- revert to the "clean" snaphot
- browse with the second browser
- take another snapshot (named after the browser being tested)
- and so on…
and then read all of the snapshots into the forensic tool of your choice?
Thank you joe_t
i will try your solution ^/\^