Difference between revisions of "Jesse Kornblum"

From ForensicsWiki
Jump to: navigation, search
m
(Tools: Added dc3dd)
Line 10: Line 10:
  
 
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk
 
[[First Responder's Evidence Disk|FRED]] - The First Responder's Evidence Disk
 +
 +
[[dc3dd]] - A patch to add forensics features to [[dd|GNU dd]]
  
 
[[Category:People]]
 
[[Category:People]]

Revision as of 19:17, 19 December 2007

Jesse Kornblum is a computer forensics author, researcher and engineer. You can read more about him in his Wikipedia entry or his official web site. His Curriculum Vitae has a current list of his papers. He current works for ManTech.

Tools

md5deep - Cross platform recursive hashing program. Computes MD5, SHA-1, SHA-256, Tiger and Whirlpool hashes. Can also match against sets of known hashes.

foremost - File carving program

ssdeep - Usually called Fuzzy Hashing, this program implements Context Triggered Piecewise Hashing.

FRED - The First Responder's Evidence Disk

dc3dd - A patch to add forensics features to GNU dd