Difference between pages "WinDD" and "Residual Data in Document Files"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
m (Created page with 'Residual data is frequently left in document files. ==Press Accounts== * [http://www.washingtonpost.com/wp-dyn/content/article/2009/12/08/AR2009120803206.html TSA Accidentally re…')
 
Line 1: Line 1:
{{Deprecated Software}}
+
Residual data is frequently left in document files.
 
+
==Press Accounts==
{{Infobox_Software |
+
* [http://www.washingtonpost.com/wp-dyn/content/article/2009/12/08/AR2009120803206.html TSA Accidentally reveals airport security secrets], Spencer S. Hsu and Carrie Johnson, Washington Post, December 9, 2009. US Transportation Security Agency posts a PDF file containing details of security procedures.
  name = WinDD |
+
  maintainer = [[Matthieu Suiche]] |
+
  os = {{Windows}} |
+
  genre = {{Memory imaging}} |
+
  license = {{GPL}} |
+
  website = [http://windd.msuiche.net/ windd.msuiche.net/] |
+
}}
+
 
+
'''WinDD''' is actually a set of Windows physical memory dumpers for both 32- and 64-bit [[Windows]].
+
 
+
Win32dd is included on the [[Helix|Helix Live CD]] response tool.
+
 
+
WinDD has be deprecated in favor of [http://www.moonsols.com/windows-memory-toolkit/ MoonSols Windows Memory Toolkit] as the project site indicates "Win32dd is so 2008 !".
+
 
+
== External Linkes ==
+
* [http://windd.msuiche.net/ WinDD project site]
+

Latest revision as of 00:25, 10 December 2009

Residual data is frequently left in document files.

Press Accounts