Difference between revisions of "File Analysis"
From Forensics Wiki
m |
(→Tools) |
||
| Line 16: | Line 16: | ||
: http://fileinfo.prevx.com/ | : http://fileinfo.prevx.com/ | ||
: Very helpful site that identifies/tracks/analyzes 100,000 new executable programs per day around the globe. The have a heuristic engine capable of sorting the good from the bad/harmful ([[malware]]). | : Very helpful site that identifies/tracks/analyzes 100,000 new executable programs per day around the globe. The have a heuristic engine capable of sorting the good from the bad/harmful ([[malware]]). | ||
| + | |||
| + | [[Hachoir]] — Python framework for binary file manipulation | ||
== External Links == | == External Links == | ||
* ... | * ... | ||
Revision as of 20:27, 18 March 2007
|
Please help to improve this article by expanding it.
|
File analysis is an important part of computer forensics.
Contents |
Introduction
...
Malware Forensics
...
Tools
- Prevx1
- http://fileinfo.prevx.com/
- Very helpful site that identifies/tracks/analyzes 100,000 new executable programs per day around the globe. The have a heuristic engine capable of sorting the good from the bad/harmful (malware).
Hachoir — Python framework for binary file manipulation
External Links
- ...