Difference between revisions of "Anti-forensic techniques"

From ForensicsWiki
Jump to: navigation, search
m
(See also.)
Line 1: Line 1:
 
'''Anti-forensic techniques''' are engaging in behavior designed to frustrate computer forensic [[techniques]]. This can include refusing to run when [[debugging]] mode is enabled, refusing to run when running inside of a [[virtual machine]], or deliberately overwriting data. Although some anti-forensic tools have legitimate purposes, such as overwriting sensitive data that shouldn't fall into the wrong hands, like any [[Tools|tool]] they can be abused.
 
'''Anti-forensic techniques''' are engaging in behavior designed to frustrate computer forensic [[techniques]]. This can include refusing to run when [[debugging]] mode is enabled, refusing to run when running inside of a [[virtual machine]], or deliberately overwriting data. Although some anti-forensic tools have legitimate purposes, such as overwriting sensitive data that shouldn't fall into the wrong hands, like any [[Tools|tool]] they can be abused.
  
See also [[Tools#Anti-forensics_Tools]].
+
== See also ==
 +
 
 +
* [[Tools#Anti-forensics_Tools]]

Revision as of 21:44, 18 March 2006

Anti-forensic techniques are engaging in behavior designed to frustrate computer forensic techniques. This can include refusing to run when debugging mode is enabled, refusing to run when running inside of a virtual machine, or deliberately overwriting data. Although some anti-forensic tools have legitimate purposes, such as overwriting sensitive data that shouldn't fall into the wrong hands, like any tool they can be abused.

See also