Difference between revisions of "Jesse Kornblum"
From Forensics Wiki
| Line 7: | Line 7: | ||
[[foremost]] - File [[carving]] program | [[foremost]] - File [[carving]] program | ||
| − | [[ssdeep]] - Fuzzy Hashing | + | [[ssdeep]] - Usually called Fuzzy Hashing, this program implements [[Context Triggered Piecewise Hashing]]. |
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk | [[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk | ||
[[Category:People]] | [[Category:People]] | ||
Revision as of 11:05, 24 February 2007
Jesse Kornblum is a computer forensics researcher and engineer. You can read more about him in his [Wikipedia entry] or his official web site http://jessekornblum.com/
Tools
md5deep - Cross platform recursive hashing program. Computes MD5, SHA-1, SHA-256, Tiger and Whirlpool hashes. Can also match against sets of known hashes.
foremost - File carving program
ssdeep - Usually called Fuzzy Hashing, this program implements Context Triggered Piecewise Hashing.
FRED - The First Responder's Evidence Disk
