Tor browser in linux

General (Technical, Procedural, Software, Hardware etc.)

Last Post by Jmundy 7 years ago

3 Posts

2 Users

0 Reactions

1,500 Views

RSS

Jmundy

(@jmundy)

Eminent Member

Joined: 7 years ago

Posts: 25

Topic starter 09/11/2019 11:57 am [#18164]

TBB is designed to 'avoid the disk' but I`ve read that this isn't always the case. If a suspect had downloaded TBB onto a Linux OS and ran it a few times, would it be possible to recover any helpful artefacts about their usage of TBB? Thanks

Quote

D1m4g3r

(@d1m4g3r)

Eminent Member

Joined: 9 years ago

Posts: 27

10/11/2019 10:45 pm

I would love to do the write up to answer your question, bit someone already beat me to it. Here's a very nice article covering Forensic examination of Tor on Linux. https://blog.torproject.org/forensic-analysis-tor-linux

ReplyQuote

Jmundy

(@jmundy)

Eminent Member

Joined: 7 years ago

Posts: 25

Topic starter 10/11/2019 11:17 pm

Thanks Soviet. That work is interesting but from 6 years ago. The more recent papers I've read seem to say very little is written to disk although RAM can offer more of note. Do you have any hands on experience in relation to my query?

ReplyQuote