full-disclosure - Re: Break-in discovery and forensics tools

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <009501c3097e$86d2b130$2400a8c0@shinjuku>
From: yannicksan at free.fr (yannick san)
Subject: Re: Break-in discovery and forensics tools

Hello,

I've seen on the netsys mailing list that you were doing a CD with tools
used for a forensic analysis.
Well, I have 2 questions.
Will it be possible to buy a copy of it when it will be done ?
I'm looking for tools for saving the state of the RAM memory into a file.
Did you find some ? When a machine is compromised, an hacker could have
loaded some information or progs into the memory, and if we shut down the
machine without saving the state of the RAM, I think we could loose some
very precious information. Saving the state of the RAM before rebooting
could be very usefull in forensic analysis.

Receive my best regards

Yannick
Information Security Engineer