Misplaced Pages

Digital Forensics Framework

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
This article provides insufficient context for those unfamiliar with the subject. Please help improve the article by providing more context for the reader. (February 2014) (Learn how and when to remove this message)
Digital Forensics Framework (DFF)
Original author(s)Frédéric Baguelin, Solal Jacob, Christophe Malinge, Jérémy Mounier
Developer(s)Frédéric Baguelin, Solal Jacob, Jérémy Mounier
Stable release1.3.0 / February 28, 2013; 11 years ago (2013-02-28)
Written inC++, Python, PyQt4
Operating systemUnix-like, Windows
Available in7 languages
TypeComputer forensics
LicenseGPL
Websitewww.digital-forensic.org

Digital Forensics Framework (DFF) is a discontinued computer forensics open-source software package. It is used by professionals and non-experts to collect, preserve and reveal digital evidence without compromising systems and data.

User interfaces

Digital Forensics Framework offers a graphical user interface (GUI) developed in PyQt and a classical tree view. Features such as recursive view, tagging, live search and bookmarking are available. Its command line interface allows the user to remotely perform digital investigation. It comes with common shell functions such as completion, task management, globing and keyboard shortcuts. DFF can run batch scripts at startup to automate repetitive tasks. Advanced users and developers can use DFF directly from a Python interpreter to script their investigation.

Distribution methods

In addition to the source code package and binary installers for Linux and Windows, Digital Forensics Framework is available in operating system distributions as is typical in free and open-source software (FOSS), including Debian, Fedora and Ubuntu.

Other Digital Forensics Framework methods available are digital forensics oriented distribution and live cd:

Publications

  • "Scriptez vos analyses forensiques avec Python et DFF" in the French magazine MISC
  • Several presentations about DFF in conferences: "Digital Forensics Framework" at ESGI Security Day "An introduction to digital forensics" at RMLL 2013

Published books that mention Digital Forensics Framework are:

  • Digital Forensics with Open Source Tools (Syngress, 2011)
  • Computer Forensik Hacks (O'Reilly, 2012)
  • Malwares - Identification, analyse et éradication (Epsilon, 2013)
  • Digital Forensics for Handheld Devices (CRC Press Inc, 2012)

In literature

  • Saving Rain: The First Novel in The Rain Trilogy

White papers

  • Selective Imaging Revisited
  • A survey of main memory acquisition and analysis techniques for the windows operating system
  • Uforia : Universal forensic indexer and analyzer
  • Visualizing Indicators of Rootkit Infections in Memory Forensics
  • EM-DMKM Case Study Computer and Network Forensics
  • OV-chipcard DFF Extension
  • L'investigation numérique « libre »
  • Malware analysis method based on reverse technology (恶意 口序分析方法 耐)

Prize

DFF was used to solve the 2010 Digital Forensic Research Workshop (DFRWS) challenge consisting of the reconstructing a physical dump of a NAND flash memory.

References

  1. "[dff] Digital Forensics Framework 1.3.0 released". Lists.digital-forensic.org. Archived from the original on 2014-02-04. Retrieved 2014-02-16.
  2. "Welcome to S.B. Jain Institute of Technology Management and Research". ArxSys. Retrieved 28 May 2014.
  3. "Open Source digital forensics & incident response software". Digital-forensic.org. Archived from the original on 2014-02-04. Retrieved 2014-02-16.
  4. "DFF accepted into Debian - Pollux's blog". Wzdftpd.net. Archived from the original on 2014-02-19. Retrieved 2014-02-16.
  5. "Linux Forensics Tools Repository". Archived from the original on November 4, 2013. Retrieved January 24, 2014.
  6. "DEFT 8 Roadmap and features | DEFT Linux - Computer Forensics live CD". DEFT Linux. Archived from the original on 2013-11-03. Retrieved 2014-02-16.
  7. "Packages Summary". Git.kali.org. 2013-02-02. Retrieved 2014-02-16.
  8. "Misc 70 - LES EDITIONS DIAMOND". Boutique.ed-diamond.com. Retrieved 2014-02-16.
  9. "Security Day". Archived from the original on February 2, 2014. Retrieved January 24, 2014.
  11. Altheide, Cory; Carvey, Harlan (2011-04-28). Digital Forensics with Open Source Tools: Cory Altheide, Harlan Carvey: 9781597495868: Amazon.com: Books. ISBN 978-1597495868.
  12. Computer-Forensik Hacks: Amazon.de: Lorenz Kuhlee, Victor Völzow: Bücher. 2009-09-09. ASIN 3868991212.
  13. Malwares - Identification, analyse et éradication: Amazon.fr: Paul Rascagneres: Livres. 2009-09-09. ASIN 2746079658.
  14. Digital Forensics for Handheld Devices: Amazon.fr: Eamon P. Doherty: Livres anglais et étrangers. 2009-09-09. ASIN 1439898774.
  15. "Saving Rain: The First Novel in The Rain Trilogy eBook: Karen-Anne Stewart: Kindle Store". Amazon. Retrieved 2014-02-16.
  16. Stuttgen, Johannes; Dewald, Andreas; Freiling, Felix C. (2013-03-14). "Selective Imaging Revisited". 2013 Seventh International Conference on IT Security Incident Management and IT Forensics. IEEE. pp. 45–58. doi:10.1109/IMF.2013.16. ISBN 978-1-4673-6307-5. S2CID 17356972.
  17. Vömel, Stefan; Freiling, Felix C. (2011-07-31). "A survey of main memory acquisition and analysis techniques for the windows operating system" (PDF). Digital Investigation. 8: 3–22. doi:10.1016/j.diin.2011.06.002. Retrieved 2014-02-16.
  18. Eijkhoudt, Arnim; Suerink, Tristan (2013). "Uforia: Universal forensic indexer and analyzer". Journal of Computer Virology and Hacking Techniques. 9 (2): 59–63. doi:10.1007/s11416-013-0177-4. S2CID 29814904.
  19. Vomel, Stefan; Lenz, Hermann (2013-03-14). "Visualizing Indicators of Rootkit Infections in Memory Forensics". 2013 Seventh International Conference on IT Security Incident Management and IT Forensics. IEEE. pp. 122–139. doi:10.1109/IMF.2013.12. ISBN 978-1-4673-6307-5. S2CID 11765652.
  20. "EM-DMKM Case Study Computer and Network Forensics" (PDF). Cygalski.pl. Retrieved 2014-02-16.
  22. "L'investigation numerique" (PDF) (in French). Agence-nationale-recherche.fr. Retrieved 2014-02-16.
  23. "Journal of Computer Applications : Vol.31 No.11". Joca.cn. November 2011. Retrieved 2014-02-16.
  24. "DFRWS 2010 Forensics Challenge Results". Dfrws.org. Archived from the original on 2014-02-03. Retrieved 2014-02-16.

External links

Categories: