For the examiners who wish to locate malware in EnCase 6 based on virus signature, I have downloaded the latest VirusTotal database and compiled to an EnCase 6 Hash Set. Note that hashes are MD5 you need to hash your files first. Acknowledgments go to the VirusTotal for making available the files. Use this link for download. Hash Set contains more than 18 millions of hashes.
To save readers' precious time I would like to emphasize the fact that that this guide applies in raids containing an NTFS formatted...
Since March 2012, I work as a digital forensics examiner, I examine cases such as copyright infringements, data breaches, hacking (defacing,...
In March 2024, all backed and client libraries are updated, and the site moved to python3.12 rutime.
In April 2023, this site was...