|−|With regards to computer forensics, "''' black bag''' " operations usually consist of the acquisition of [[digital evidence]] without the target's knowledge. |+|
'''''' of the acquisition of .
| || |
|−|This type of operation is especially useful during internal affairs or ongoing criminal investigations. Depending on the sensitivity of the investigation, access to the target's computer is sometimes facilitated by the target's superiors by giving the evidence collection specialist intelligence to bypass [[ physical security]] devices during the operation. It should also be noted that during this type of operation, it is also possible to install applications and configure a computer system to further the investigation from a remote location. |+|
|−|According to the [http: //foia.fbi.gov/foiaindex/bboperations.htm FBI's own web page], the term "black bag" is coined from a practice used by that agency between 1942 and 1967. During that time, the [[FBI]] illegally obtained evidence against several individuals/organizations by entering their offices and obtaining photographs of information found in their records. The practice was ordered to be discontinued by then FBI Director Hoover. |+|
Revision as of 21:56, 13 January 2009
A version of Fastdump called Fastdump Pro has been rumored but is not currently available. This version of the memory acquisition tool is supposed to be able to run on all 32 and 64 bit versions of Windows and support systems with more than 4GB of RAM.