An Anti-Forensics Primer

Presented at DerbyCon 3.0 All in the Family (2013), Sept. 28, 2013, 5:30 p.m. (25 minutes).

This talk will cover the basics of anti-forensics, the tools and techniques that can be used to make life harder for computer forensic examiners. We will cover some of the basic methods that are used (disk wiping, time stomping, encryption, etc…) and talk about which of these methods might actually work and which are easily surmounted with common forensic tools.

Presenters:

• Jason Andress
  Dr. Jason Andress (ISSAP, CISSP, GPEN, CISM) is a seasoned security professional with a depth of experience in both the academic and business worlds. In his present and previous roles, he has provided information security expertise to a variety of companies operating globally. He has taught undergraduate and graduate security courses since 2005 and conducts research in the area of data protection. He has written several books and publications covering topics including data security, network security, penetration testing, and digital forensics.

Links:

• https://infocon.org/cons/DerbyCon/DerbyCon 3 2013/video/An Anti Forensics Primer Jason Andress.mp4

Similar Presentations:

• DEF CON 20 (2012) / Anti-Forensics and Anti-Anti-Forensics: Attacks and Mitigating Techniques for Digital-Forensic Investigations
• DEF CON 18 (2010) / Sniper Forensics - One Shot, One Kill
• BruCON 0x08 (2016) / Anti-Forensics AF