Difference between pages "JTAG and Chip-Off Tools and Equipment" and "Live CD"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Added Sireda adapters for chip-off work.)
 
m (See Also: there are advantages, disadvantages and issues)
 
Line 1: Line 1:
The following list contains equipment used for performing JTAG and chip-off analysis.  It is noted when equipment is used for both procedures in order to avoid overlap and duplication of equipment.  The URL's provided are for reference and other vendors and suppliers exist for said equipment.  Please search Internet for other competitive vendors.
+
{{expand}}
  
''Note: This equipment is not a definitive list and substitutions can be made for equivalent tools and equipment.''
+
A '''live CD''' is a CD containing a bootable computer [[operating system]]. Live CDs are widely used in [[computer forensics]] and [[Incident Response | incident response]].
  
'''JTAG and Chip-Off Equipment List'''
+
== Advantages ==
  
{| class="wikitable"
+
* [[Physical memory]] of a computer can be imaged by performing cold boot attack without running tools on an untrusted [[OS]];
! align="left"| Item
+
* Acquisition over a network connection without running tools on an untrusted [[OS]];
! Info
+
* No need to reconstruct [[RAID]] arrays;
! Estimated Cost (CAD)
+
* etc.
|-
+
|Carton SPZT-50PG Microscope (optional: w/trinocular)
+
|http://valleymicroscope.com/shop/spz-50pg/
+
|$1200
+
|-
+
|Xytronic 988D Solder Rework Station
+
|http://www.howardelectronics.com/xytronic/988d.html
+
|$300
+
|-
+
|Weller WES51 Solder Station
+
|sourced locally (Electronics shop)
+
|$100
+
|-
+
|Xytronic LF-852D Hot Air Station
+
|http://www.howardelectronics.com/xytronic/LF-852D.html
+
|$225
+
|-
+
|HP Agilent U8002A Variable Power Supply
+
|http://www.home.agilent.com/agilent/product.jspx?pn=u8002a&cc=CA&lc=eng
+
|$400
+
|-
+
|Amprobe 35XP Multimeter
+
|sourced locally (Electronics shop)
+
|$120
+
|-
+
|Magnifying Desk Lamp
+
|http://www.amazon.com/Ultra-Efficient-LED-Magnifier-Lamp-Adjustable/dp/B001064VTE
+
|$100
+
|-
+
|Circuit board holder
+
|http://www.ibreakityoufixit.com/shop/mounting-kit
+
|$13
+
|-
+
|Chip Epoxy Glue Remover
+
|http://www.ebay.com/itm/BGA-IC-30ml-IC-BGA-CPU-Chip-Epoxy-Glue-Remover-Adhesive-Solution-Solvent-Liquid-/321012736931?pt=Digital_Camera_Accessories&hash=item4abdd9a3a3
+
|$10
+
|-
+
|0.040 gauge transformer winding wire
+
|sourced locally (Electronics shop)
+
|$15
+
|-
+
|Kester 44 rosin flux solder
+
|sourced locally (Electronics shop)
+
|$50
+
|-
+
|Xcelite Hobby Knives
+
|sourced locally (Electronics shop)
+
|$15
+
|-
+
|Terra Dexterity PVC foam gloves
+
|sourced locally (Costco)
+
|$10
+
|-
+
|8" x 8" x 3/8" steel plate
+
|sourced locally (Steel fabrication shop)
+
|free
+
|}
+
  
'''JTAG Specific Equipment List'''
+
== Disadvantages ==
  
{| class="wikitable"
+
* Out-of-date software;
! align="left"| Item
+
* No simple way to reconfigure Live CD: you cannot easily rebuild ''foo'' to support ''bar'' (e.g. rebuild [[Sleuthkit]] to support [[AFF]]).
! Info
+
! Estimated Cost (CAD)
+
|-
+
|RIFF Box
+
|http://www.multi-com.pl/index.php/en_US,details,id_pr,7883,menu_mode,categories.html
+
|$120
+
|-
+
|Octoplus Box
+
|http://gsmserver.com/shop/gsm/octoplus_box_full_set.php
+
|$340
+
|}
+
  
 +
== See Also ==
  
'''Chip-Off Specific Equipment List'''
+
* [[:Category:Live CD|Forensics Live CDs]]
 
+
* [[Forensic Live CD issues]]
{| class="wikitable"
+
! align="left"| Item
+
! Info
+
! Estimated Cost (CAD)
+
|-
+
|Wagner HT1000 Heat Gun
+
|http://www.wagnerspraytech.com/portal/ht1000_en_spray,362096,358970.html
+
|$30
+
|-
+
|Heat Gun stand
+
|http://www.ibreakityoufixit.com/shop/air-gun-holder
+
|$60
+
|-
+
|UP-828 Programmer
+
|http://www.up48.com/english/programmer/up828.htm
+
|$1300 - $1700 depending on source
+
|-
+
|UP-828 SBGA152 Adapter
+
|BlackBerry
+
|$600 - $1000 depending on source
+
|-
+
|UP-828 BGA110 Adapter
+
|
+
|$600 - $1000 depending on source
+
|-
+
|UP-828 VBGA169E Adapter
+
| BlackBerry and Android
+
|$600 - $1000 depending on source
+
|-
+
|UP-828 VBGA133 Adapter
+
|iPhone 4
+
|$600 - $1000 depending on source
+
|-
+
|Sireda eMMC Test Socket Adapters
+
|http://www.teeltech.com/forensic-tools/sireda-adapter-kit/
+
|$2200
+
|}
+
 
+
'''Notes'''
+
 
+
1. The UP-828 driver is not signed and therefore doesn't work by default in Windows 7 64-bit. The programmer is identified as a as a Cypess Semiconductor Corp. CY7C68013. The signed Windows 7 64-bit driver can be installed by downloading and installing the Cypress EZ-USB FX2LP Development Kit, then using the CyUSB.sys driver found in '<installdir>\CY3684_EZ-USB_FX2LP_DVK\1.0\Drivers\cyusbfx1_fx2lp' for the UP-828 programmer.
+

Latest revision as of 07:17, 23 April 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

A live CD is a CD containing a bootable computer operating system. Live CDs are widely used in computer forensics and incident response.

Advantages

  • Physical memory of a computer can be imaged by performing cold boot attack without running tools on an untrusted OS;
  • Acquisition over a network connection without running tools on an untrusted OS;
  • No need to reconstruct RAID arrays;
  • etc.

Disadvantages

  • Out-of-date software;
  • No simple way to reconfigure Live CD: you cannot easily rebuild foo to support bar (e.g. rebuild Sleuthkit to support AFF).

See Also