IoT device Forensic...
 
Notifications
Clear all

IoT device Forensics

6 Posts
4 Users
0 Reactions
525 Views
(@mani3196)
New Member
Joined: 7 years ago
Posts: 4
Topic starter  

Hai,
I have dump image of the smart alarm device. I want to write a python that will parse the dump .img file and extract the list of events
that occurred in the device. I tried reading the dump file by writing a python program but I am unable to read it. Can you suggest me how to go forward for reading the dump file of an IoT device?


   
Quote
azrael
(@azrael)
Honorable Member
Joined: 19 years ago
Posts: 656
 

Could you give over a little more information ? What is the make/model of the device ? How have you obtained the "dump" ?


   
ReplyQuote
(@mani3196)
New Member
Joined: 7 years ago
Posts: 4
Topic starter  

The device is a smart alarm device and I have dump of it. I obtained from dfwrs competition 2018.


   
ReplyQuote
azrael
(@azrael)
Honorable Member
Joined: 19 years ago
Posts: 656
 

I think that you may have missed the point of the competition …

Generally the idea is to solve the mystery yourself not ask others to do it for you.

I'm out.


   
ReplyQuote
watcher
(@watcher)
Estimable Member
Joined: 19 years ago
Posts: 125
 

Hai,
I have dump image of the smart alarm device. I want to write a python that will parse the dump .img file and extract the list of events
that occurred in the device. I tried reading the dump file by writing a python program but I am unable to read it. Can you suggest me how to go forward for reading the dump file of an IoT device?

As a general approach to unknown data, step #1 is almost always a hex editor to look at what you've got.


   
ReplyQuote
(@randomaccess)
Reputable Member
Joined: 14 years ago
Posts: 385
 

As a general approach to unknown data, step #1 is almost always a hex editor to look at what you've got.

and then maybe binwalk https://gist.github.com/briankip/8f8747a2488af827e3b4


   
ReplyQuote
Share: