Difference between revisions of "File Analysis"
From Forensics Wiki
m |
|||
| (3 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
| − | + | {{Expand}} | |
| − | + | '''File analysis''' is an important part of [[computer forensics]]. | |
| − | + | == Introduction == | |
| − | + | ... | |
| − | + | == Malware Forensics == | |
| − | + | ||
| − | + | ... | |
| − | + | ||
| + | == Tools == | ||
| + | |||
| + | ; [[Prevx1]] | ||
| + | : http://fileinfo.prevx.com/ | ||
| + | : Very helpful site that identifies/tracks/analyzes 100,000 new executable programs per day around the globe. They have a heuristic engine capable of sorting the good from the bad/harmful ([[malware]]). | ||
| + | |||
| + | [[Hachoir]] — Python framework for binary file manipulation | ||
| + | |||
| + | == External Links == | ||
| + | |||
| + | * ... | ||
Revision as of 09:41, 17 July 2008
|
Please help to improve this article by expanding it.
|
File analysis is an important part of computer forensics.
Contents |
Introduction
...
Malware Forensics
...
Tools
- Prevx1
- http://fileinfo.prevx.com/
- Very helpful site that identifies/tracks/analyzes 100,000 new executable programs per day around the globe. They have a heuristic engine capable of sorting the good from the bad/harmful (malware).
Hachoir — Python framework for binary file manipulation
External Links
- ...