Skip to content
Hallway
0:00 / 0:00

#digitalforensics#defcon#filerecovery

Defcon 21 - Forensic Fails - Shift + Delete Won't Help You Here

HackersOnBoard

71K subscribers • 11 videos on Hallway

YouTube
  • Recommended by 1 person: 1 on Stack Overflow and its sister sites.
  • Presented by Eric Robi and Michael Perklin

Intermediate. Assumes working knowledge.

644K views12 years ago1 recommendation

SecurityExploits and vulnerabilitiesReverse engineering

Eric Robi and Michael Perklin explain common mistakes in hiding digital evidence and how forensic investigators uncover deleted or renamed files.

Eric Robi & Michael Perklin August 1st--4th, 2013 Rio Hotel & Casino • Las Vegas, Nevada

Why it's here

1 person recommends this

What people say. Recommended as an illustration of why changing file extensions is ineffective against forensic analysis.

Moments people linked to

user288447on Information Security Stack Exchange • Recommends

On “Is Changing a File Type and Name an Effective Security Solution?”

A youtube video from Defcon 21: link to this video The guy being investigated simply changed the extensions of the files (eg. from test.jpeg to test.txt). However when the crypto guys look at it their tool detects that the extensions don't match the files and these files are the first to be examined more closely by a human.
5View the answer