RSSAmplifier

Blog

Anti-Forensics.com

Rendering Digital Investigations Irrelevant

anti-forensics.comRSS feed ↗10 posts

Latest posts

Synthetic Timelines: When a Fake Computer Tells a False Life Story

A digital forensics threat model about staged systems, mirrored machines, reputation destruction, and the weaponization of metadata. The post Synthetic Timelines: When a Fake Computer Tells a False Life Story appeared first on Anti-Forensics.com .

DRIFTR: Behavioral Obfuscation Using Keyboard Drift, Entropy Injection, and Ephemeral Decoding

“Right hand drifting like it’s making bad life choices. The message survives anyway.” How to hide meaning in plain sight by weaponizing human error. 🔪 The Premise There are two kinds of people in digital forensics: This is for the second group. Because the cleanest way to hide a message isn’t encryption anymore.It’s making it [ ] The post DRIFTR: Behavioral Obfuscation Using Keyboard Drift,…

How Viable is a File System Mini-Filter Driver for Whitelisting File Modifications on a Windows Volume (ransomware protection)?

The type of mini-filter described in this context is a File System Mini-Filter Driver, specifically designed to intercept and control file I/O operations on the system. These drivers are part of the Windows Filter Manager architecture, introduced in Windows XP and later, to allow developers to create drivers that filter file system calls without the [ ] The post How Viable is a File System…

Python XOR – Running Encrypted Python Code from Memory

This program will execute XOR encrypted ciphertext (Python code) when provided the right passphrase or key, in memory. The post Python XOR Running Encrypted Python Code from Memory appeared first on Anti-Forensics.com .

Generate an Unlimited Amount of VeraCrypt Containers

The major goal of this software is to frustrate a digital forensics examination by overwhelming an investigator with encrypted containers. The post Generate an Unlimited Amount of VeraCrypt Containers appeared first on Anti-Forensics.com .

LSB Steganography Password Protect with Encryption in Python using PNG Files

This software implements LSB Steganography password protect, as described and demonstrated in the link above, and in addition, message encryption. This way a user can encrypt their hidden message using Fernet, with a passphrase. The post LSB Steganography Password Protect with Encryption in Python using PNG Files appeared first on Anti-Forensics.com .

LSB (Least Significate Bit) Steganography in Python using PNG Files

Using LSB Steganography in Python to hide a message in a PNG. Input and extract hidden messages using Least Significant Bit Steganography. The post LSB (Least Significate Bit) Steganography in Python using PNG Files appeared first on Anti-Forensics.com .

Steganography by File Appending – Hiding a zip File in a jpg

Appending a ZIP file to the end of a JPG image is a straightforward process because the JPEG format's structure allows the image to remain valid and viewable in image viewers, while the ZIP file remains accessible with archive managers. The post Steganography by File Appending Hiding a zip File in a jpg appeared first on Anti-Forensics.com .

Jennifer Funk – To VPN or not to VPN with TOR

Food for thought and lunch time entertainment. To VPN or not to VPN when using TOR. You may think "Always VPN! no doubt!" Not so fast...check out this video for the pros and cons of using a VPN with TOR. The post Jennifer Funk To VPN or not to VPN with TOR appeared first on Anti-Forensics.com .

Tails Version 6.0 – 2/27/2024

We are very excited to present you Tails 6.0, the first version of Tails based on Debian 12 (Bookworm) and GNOME 43. Tails 6.0 brings new versions of most of the software included in Tails as well as several important security and usability improvements. The post Tails Version 6.0 2/27/2024 appeared first on Anti-Forensics.com .