memory capturing

[dangutdavid]

Build an automated forensics tool. This could be to grab volatile evidence from a MAC or a Windows machine. It could also be to collect GPS evidence from mobile devices or Sat Navs. This would require some programming skill. This can be written in any language - Java, C, C#, C++, Phython, etc


please friends any idea

[VictorN]

Is it a job offer?

[OReubens]

Actually if it really is for after-the-fact forensics, then it CAN NOT be java, C# or python or any other language that requires a separate framework to be present.

The framework could not be present causing the forensics tool to not run, and the mere act of installing a framework could destroy whatever evidence you're trying to obtain.

If it is what you claim, then it needs to be a stand alone application that can be run from diskette or memorystick. Don't rely on network/internet, it may not be installed/configured the way you need it to be, and doing so might destroy whatever you're trying to detect.

[dangutdavid]

Actually if it really is for after-the-fact forensics, then it CAN NOT be java, C# or python or any other language that requires a separate framework to be present.

The framework could not be present causing the forensics tool to not run, and the mere act of installing a framework could destroy whatever evidence you're trying to obtain.

If it is what you claim, then it needs to be a stand alone application that can be run from diskette or memorystick. Don't rely on network/internet, it may not be installed/configured the way you need it to be, and doing so might destroy whatever you're trying to detect.

thanks

[razzle]

Actually if it really is for after-the-fact forensics, then it CAN NOT be java, C# or python or any other language that requires a separate framework to be present.

Well, a tool like this most likely would have a probe part and a control & analysis part. The probe would be integrated into the target computer as non-intrusively as possible and it would most likely be written in assembly or C or both. The probe would then communicate via hardware wire with a separate computer running the control & analysis part of the tool. Since this computer would be isolated from the target there would be no special restrictions on what programming languages to use there.