Difference between pages "PEiD" and "Blackbag"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m (Website has moved to http://www.peid.info/ - changed URL to reflect this.)
 
 
Line 1: Line 1:
{{Expand}}
+
With regards to computer forensics, "black bag" operations usually consist of the acquisition of digital evidence without the target's knowledge.  This type of operation is especially useful during internal affairs or ongoing criminal investigations.  Depending on the sensitivity of the investigation, access to the target's computer is sometimes facilitated by the target's superiors by giving the evidence collection specialist intelligence to bypass physical security devices during the operation.  It should also be noted that during this type of operation, it is also possible to install applications and configure a computer system to further the investigation from a remote location.
  
{{Infobox_Software |
 
  name = PEiD|
 
  maintainer = Jibz, Qwerton, snaker, xineohP |
 
  os = {{Windows}} |
 
  license = ?? |
 
  genre = {{Analysis}} |
 
  website = http://www.peid.info/ |
 
}}
 
  
PEiD is a GUI-based program that runs under Windows which identifies more than 600 different signatures in PE files. It supports external plugins via it's Plugin Interface.
+
According to the [http://foia.fbi.gov/foiaindex/bboperations.htm FBI's own web page], the term "black bag" is coined from a practice used by that agency between 1942 and 1967.  During that time, the FBI illegally obtained evidence against several individuals/organizations by entering their offices and obtaining photographs of information found in their records. The practice was ordered to be discontinued by then FBI Director Hoover.

Revision as of 15:05, 6 July 2006

With regards to computer forensics, "black bag" operations usually consist of the acquisition of digital evidence without the target's knowledge. This type of operation is especially useful during internal affairs or ongoing criminal investigations. Depending on the sensitivity of the investigation, access to the target's computer is sometimes facilitated by the target's superiors by giving the evidence collection specialist intelligence to bypass physical security devices during the operation. It should also be noted that during this type of operation, it is also possible to install applications and configure a computer system to further the investigation from a remote location.


According to the FBI's own web page, the term "black bag" is coined from a practice used by that agency between 1942 and 1967. During that time, the FBI illegally obtained evidence against several individuals/organizations by entering their offices and obtaining photographs of information found in their records. The practice was ordered to be discontinued by then FBI Director Hoover.