Digital Forensics - What you need to know. Part 1

Рет қаралды 25,353

Күн бұрын

Do you need data recovery? Do you want to be featured in one of my videos? Contact me via email info@datarescuelabs.com
Ever wondered about how to get into digital forensics? Want to know the tools we use? This is the video for you.
Yes, my videos are long but If you want to jump around the video, below you can find the timestamps:
0:00 Introduction to digital forensics
2:20 Certification
9:41 Software - Other tools
15:16 Word of warning
17:47 Final words
-------------------------------------------------------------------------------------
TikTok: / forensicguy
Instagram: / datarescuelabs.inc
Facebook: / datarescuelabs
-------------------------------------------------------------------------------------
Some of the tools that we use:
ruSolut Monolith adapter
ruSolut eMMC Adapters
ruSolut TSOP adapter
ruSolut Visual Nand Reconstructor
FlashExtractor
Z3X EasyJtag + UFS
JBC NANO
Hakko Soldering Iron FM-203
Hakko Rework Station 810B
Quick 8610W Rework Station
ACHI IR6500 BGA Station
PC-3000 UDMA
PC-3000 Portable III +SSD and nVMe
DeepSpar 3
DeepSpar 4
DeepSpar DPI PCI-E NVME Addon
DeepSpar Forensic Addon
DeepSpar Network Addon
ZXW Tools
Adobe Premiere CC
Adobe Photoshop CC
Camtasia Studio
Cellebrite UFED (Latest Version)
MSAB XRY
Magnet Forensics IEF
Magnet Axiom
X-Ways
FTK Imager
Various Linux Distros
-------------------------------------------------------------------------------------
Music:
Kupla - Droplet chll.to/372fe45c
-------------------------------------------------------------------------------------
Stock footage:
Video by cottonbro from Pexels
Video by MrColo from Pexels
Video by cottonbro from Pexels
Video by Paice Street from Pexels
Video by Sora Shimazaki from Pexels
Video by Ron Lach from Pexels
Video by Pressmaster from Pexels
-------------------------------------------------------------------------------------
All graphics created by Data Rescue Labs
Need data recovery service? Forensic service?
Contact us today info@datarescuelabs.com
Data Rescue Labs Inc
145 Traders Blvd East Unit 8
Mississauga, Ontario
L4Z 3L3
Canada
Copyright (c) Data Rescue Labs Inc 2021
1-877-681-4131
www.datarescuelabs.com
#digitalforensics #DFIR #forensics

Пікірлер: 79

@forensicguy 3 жыл бұрын

There will be a part 2 of this coming next week. I had to split the video as I didn't want to release a 40-minute video.

@cocobongo268 3 жыл бұрын

Excellent. You are right, things have changed over the years. This is pure gold.

@forensicguy 3 жыл бұрын

Thank you! Part 2 will have all the hardware I use explained in detail.

@JohnSmith-cp5pw 3 жыл бұрын

Great video! Thanks for putting it together to make it easier for others to see the bigger picture. Looking forward for more parts of this series.

@forensicguy 3 жыл бұрын

You’re welcome! Part 2 is already up and part 3 will be next week

@PrestonMcNair 3 жыл бұрын

Great video! Over the past year I’ve been creating my agency’s first lab from scratch, so your content has been helpful. Looking forward to the other segments in this series!

@forensicguy 3 жыл бұрын

Thanks Preston. I will see if I can make a 3 part out of this. If there is anything else you’d like me to touch in forensics, I’ll be more than glad.

@Lexzee_Lee 3 жыл бұрын

I'm getting ready to obtain CHFI now. Next shall be CCE. Thank you for the video. So insightful!

@DiskTuna 3 жыл бұрын

So good that you address the emotional side of this too!! If I repair photos I get to see not so much bad stuff, but lots private stuff, some times highly erotic bedroom 'happenings'. I myself was surprised how sort of easy it was to not look at this in 'that way' if you know what I mean, but purely from a technical perspective. Still what you say is true, what you see can't be unseen.

@forensicguy 3 жыл бұрын

That is so true. It can be really rough on your mental well-being when you see certain things. Homemade pornography is one thing, but there are other things that are just hard to look at. I’ve only had this type of material few times but I can never unsee these things.

@batmanasdasd 3 жыл бұрын

OMG THIS IS NEED IN MY LIFE THANK YOUUUU

@AndresLopez-yk6bb 3 жыл бұрын

Nice video bro, greatings from Guatemala

@ricardopaez3844 3 жыл бұрын

AMAZING I'm not interesting to involve in forensics things but the knowledge you give to us is huge, thanks men new subscriber

@aymanjoomratee6400 3 жыл бұрын

Long awaited video .. and good job on weight lost

@scroogemcj7851 Жыл бұрын

I appreciate this content. I just got my acceptance letter into a forensics program. I'm pretty excited!

@forensicguy Жыл бұрын

Congrats!

@joguizas 3 жыл бұрын

Very nice!!

@justknot4481 3 жыл бұрын

good content !!👍🏻🤓

@TheMadhatter2561 3 жыл бұрын

Very informative video! I work in the forensic field to and understand the nuances of dealing with these types of cases.

@forensicguy 3 жыл бұрын

Thank you!

@-Giuseppe 3 жыл бұрын

Great video, thank you! Are you maybe able to produce and explain some videos about free forensic tools?

@forensicguy 3 жыл бұрын

Definitely not a bad idea. Maybe in near future, there are plenty great free tools

@bilal_mtl 3 жыл бұрын

I also found you on tiktok, I love your KZfaq channel. You gain a new subscriber :)

@bilal_mtl 3 жыл бұрын

I just started a computer science program so this is so interesting, thank you!

@forensicguy 3 жыл бұрын

Thanks amazing! Are you planning on going into forensics?

@bilal_mtl 3 жыл бұрын

@@forensicguy I'm oriented into programming but the more I learn about forensic, the more I consider it !

@forensicguy 3 жыл бұрын

It’s a great field to be in!

@apartmanin8145 Жыл бұрын

Great work man, a lot of knowledge there! I have one technical question, maybe it sounds stupid but it's complex. Is there any way to permanent delete files that are already deleted but can be recovered with some tools? For example, jpg or word documents which can be found by tools, but they are already deleted from HDD. Example - you find some old files with UFS explorer, they are listed but deleted long time ago. How to delete them permanently so they can't be recovered anymore? Can they be removed permanently without formating HDD and doing another stuff with it?

@eltoruan 9 ай бұрын

Nice

@CortVermin Жыл бұрын

holy moley i did not recognize you in the video, thats a lot of weight you shed, awesome job dude

@forensicguy Жыл бұрын

Thank you!

@cocobongo268 3 жыл бұрын

Hi my friend. Let's watch another interesting video.

@forensicguy 3 жыл бұрын

Enjoy! Part 2 next week. I might extend this to part 3.

@cocobongo268 3 жыл бұрын

@@forensicguy Please, consider as many parts as needed.

@agnt-pl6dj 3 жыл бұрын

nice video

@forensicguy 3 жыл бұрын

Thanks for watching! Part 2 next Monday

@batmanasdasd 3 жыл бұрын

Almost a thousand views, everyone loves forensics videos 😆

@forensicguy 3 жыл бұрын

And I figured out that I can squeeze in part 4 😀

@keithhansen7409 2 жыл бұрын

Thank you I’ve been going to college for digital forensics I’m almost done and I’ve been confused about what to do next

@forensicguy 2 жыл бұрын

Glad I could help!

@darryljackwayservices 3 жыл бұрын

Thanks for the video and can’t wait for the hardware one to come out. I am interested in getting into forensics and was wondering if I use autopsy will that software give me enough practical experience to do my CCE cert?

@forensicguy 3 жыл бұрын

Oh definitely, autopsy it’s quite powerful even though it’s free. Look up who developed it and that should give you enough confidence in it. In order to pass CCE, the most important part is to know your procedures. Proper evidence handling, document everything that you find. On one of my practical exams, I had a passing score of 103% because i went little bit more in depth with my findings. What they want to see is that you understand the methodology and can apply it when writing your three practical exams.

@darryljackwayservices 3 жыл бұрын

@@forensicguy I currently work in the security industry and repossession industry in Australia so I have an understanding of chain of custody, report writing and factual investigation. This is sort of the next set for me.

@forensicguy 3 жыл бұрын

Then you have the right base and experience for CCE. The practical exam should be much easier for you

@harshanisamarawickrama2209 3 жыл бұрын

We Are Suffering from Covid Disease. This will Only End After My Phone Switch On. My 🤬. Hiiiiiii. Excellent Video Mr Stanko. Police 🚨 Forensic Stories

@forensicguy 3 жыл бұрын

Stay safe!

@harshanisamarawickrama2209 3 жыл бұрын

@@forensicguy Thanks So Much Friend. Stay Safe All of U.

@steve00alt70 2 жыл бұрын

Can they recover a hard drive that has been destroyed in a fire? Do you need to be good at maths? for the psycological part is there an auto blur function if you dont wanna see graphic images in forensics?

@forensicguy 2 жыл бұрын

I've only gotten lucky with drives that had light fire damage. You don't need to be good at math but it always helps. Yes we use methods not to have to view the images. This method uses hashes of images compares to a known database of such images. Sometimes the images have to be viewed to confirm the content

@batmanasdasd 3 жыл бұрын

MORE IT A 50 PART SERIES ILL WATCH EVERY LAST SECOND IN 0.25 SPEED

@forensicguy 3 жыл бұрын

😆😆😆 I have more forensics on the way this year

@edwardmylnychuk5774 Жыл бұрын

from research have done and seen on the net, NOTHING is private period but is not exposed until someone wants to deal with you because you pissed of a top criminal in the gov or someplace else.

@Boosted00 3 жыл бұрын

TV star 😁👍

@forensicguy 3 жыл бұрын

😆😆

@aminl9144 3 жыл бұрын

Could you make a video how to protect you’re iPhone

@forensicguy 3 жыл бұрын

Keep it updated

@aminl9144 3 жыл бұрын

@@forensicguy is there a way to protect you’re iPhone against any system like celebrite

@blenderbeachwavesblend 2 жыл бұрын

I don't think people would do so, usually a number can determine what a file could be.

@forensicguy 2 жыл бұрын

If you’re mentioning cp, yes in most cases we only go bash hashes alone. But in some cases not all images are in the db.

@VCCBoardRepairs 2 жыл бұрын

I use Autopsy often 😅

@forensicguy 2 жыл бұрын

Autopsy is great!

@didyoueatacheeseburgerforb9066 2 жыл бұрын

Can I get into digital forensics with a cybersecurity degree?

@forensicguy 2 жыл бұрын

You might need to add some to your skills but you already have the fundamentals

@mikenidecki5911 3 жыл бұрын

Holy shieet Your are from Poland bro?

@forensicguy 3 жыл бұрын

I am :)

@mikenidecki5911 3 жыл бұрын

Poznałem Twój kanał pare miesięcy temu, ale tak dobrze mówisz po angielsku i masz tak naturalny akcnet, że nawet nie przypuszczałem że możesz być z PL 🙈 Great job!

@forensicguy 3 жыл бұрын

Dziękuje. Trochę mam akcentu, tu w Kanadzie to Kanadyjczycy trochę rozpoznają ;)

@yamatanoorochi3149 Ай бұрын

7:42 lawyer? huh?

@ruddoz6 2 жыл бұрын

its kinda expensive equipment.. :P

@blenderbeachwavesblend 2 жыл бұрын

Hash.

@HalifaxComputersRepair 2 жыл бұрын

its million dollar business , yes the fedral government will pay any price ......easy money if you know how to do it .....and if your willing to spend lot of money on hardware side + software side ......

@forensicguy 2 жыл бұрын

Definitely!