ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "Jesse Kornblum"

From ForensicsWiki
Jump to: navigation, search
Line 7: Line 7:
 
[[foremost]] - File [[carving]] program  
 
[[foremost]] - File [[carving]] program  
  
[[ssdeep]] - Fuzzy Hashing
+
[[ssdeep]] - Usually called Fuzzy Hashing, this program implements [[Context Triggered Piecewise Hashing]].
  
 
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk
 
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk
  
 
[[Category:People]]
 
[[Category:People]]

Revision as of 16:05, 24 February 2007

Jesse Kornblum is a computer forensics researcher and engineer. You can read more about him in his [Wikipedia entry] or his official web site http://jessekornblum.com/

Tools

md5deep - Cross platform recursive hashing program. Computes MD5, SHA-1, SHA-256, Tiger and Whirlpool hashes. Can also match against sets of known hashes.

foremost - File carving program

ssdeep - Usually called Fuzzy Hashing, this program implements Context Triggered Piecewise Hashing.

FRED - The First Responder's Evidence Disk