Difference between revisions of "Anti-forensic techniques"

From ForensicsWiki
Jump to: navigation, search
m
Line 1: Line 1:
Engaging in behavior designed to frustrate computer forensic [[techniques]]. This can include refusing to run when [[debugging]] mode is enabled, refusing to run when running inside of a [[virtual machine]], or deliberately overwriting data. Although some anti-forensic tools have legitimate purposes, such as overwriting sensitive data that shouldn't fall into the wrong hands, like any [[Tools|tool]] they can be abused.
+
'''Anti-forensic techniques''' are engaging in behavior designed to frustrate computer forensic [[techniques]]. This can include refusing to run when [[debugging]] mode is enabled, refusing to run when running inside of a [[virtual machine]], or deliberately overwriting data. Although some anti-forensic tools have legitimate purposes, such as overwriting sensitive data that shouldn't fall into the wrong hands, like any [[Tools|tool]] they can be abused.
 
+
  
 
See also [[Tools#Anti-forensics_Tools]].
 
See also [[Tools#Anti-forensics_Tools]].

Revision as of 19:11, 15 March 2006

Anti-forensic techniques are engaging in behavior designed to frustrate computer forensic techniques. This can include refusing to run when debugging mode is enabled, refusing to run when running inside of a virtual machine, or deliberately overwriting data. Although some anti-forensic tools have legitimate purposes, such as overwriting sensitive data that shouldn't fall into the wrong hands, like any tool they can be abused.

See also Tools#Anti-forensics_Tools.