Difference between revisions of "Jesse Kornblum"

From ForensicsWiki
Jump to: navigation, search
Line 7: Line 7:
 
[[foremost]] - File [[carving]] program  
 
[[foremost]] - File [[carving]] program  
  
[[ssdeep]] - Fuzzy Hashing
+
[[ssdeep]] - Usually called Fuzzy Hashing, this program implements [[Context Triggered Piecewise Hashing]].
  
 
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk
 
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk
  
 
[[Category:People]]
 
[[Category:People]]

Revision as of 12:05, 24 February 2007

Jesse Kornblum is a computer forensics researcher and engineer. You can read more about him in his [Wikipedia entry] or his official web site http://jessekornblum.com/

Tools

md5deep - Cross platform recursive hashing program. Computes MD5, SHA-1, SHA-256, Tiger and Whirlpool hashes. Can also match against sets of known hashes.

foremost - File carving program

ssdeep - Usually called Fuzzy Hashing, this program implements Context Triggered Piecewise Hashing.

FRED - The First Responder's Evidence Disk