Skip to content

Anti-Forensics and Anti-Anti-Forensics

Michael Perklin

Michael Perklin explores anti-forensics and anti-anti-forensics at DEF CON 20, examining digital-forensics and practical defenses.

Summary

Architecture and Background

Copy of the slides for this talk are here: Anti-Forensics and Anti-Anti-Forensics: Attacks and Mitigating Techniques for Digital-Forensic Investigations Michael Perklin Digital investigations may be conducted differently by various labs (law enforcement agencies, private firms, enterprise corporations) but each lab performs similar steps when acquiring, processing, analyzing, or reporting on data.

Vulnerability Analysis

This talk will discuss techniques that criminals can use to throw wrenches into each of these steps in order to disrupt an investigation, and how they can even force evidence to be excluded from litigation.

Exploitation and Demonstrations

Each of these techniques can be detected early by an investigator who is aware of them, and they can be avoided if you know what to look for.

Remediation and Defensive Strategies

Come learn about Anti-Forensic techniques, and the Anti-Anti-Forensic techniques that mitigate them. Michael Perklin is a Senior Investigator and has performed digital-forensic examinations on over a thousand devices. Michael is a member of the High Technology Crime Investigations Association, a professor of digital forensics at Sheridan College, and is currently writing his thesis paper on anti-forensic techniques. Twitter: @mperklin

Related talks

Main Stage·22 min

  • DEF CON
  • Blue Team
  • Date: Jul 2012
  • Location: Las Vegas

Dead Addict · Gail Thackeray

Dead Addict and Gail Thackeray explores before, during, and after at DEF CON 20, examining digital-forensics and practical defenses.

digital-forensicsanti-forensicsincident-response+1

Main Stage·48 min

  • DEF CON
  • Blue Team
  • Date: Jul 2012
  • Location: Las Vegas

Tim Maletic · Christopher Pogue

Tim Maletic and Christopher Pogue explores opfor 4ever at DEF CON 20, examining digital-forensics and practical defenses.

digital-forensicsanti-forensicsincident-response+1

Main Stage·46 min

  • DEF CON
  • Blue Team
  • Date: Aug 2013
  • Location: Las Vegas

Djwishbone · PuNk1nPo0p

Djwishbone and PuNk1nPo0p explores byo disaster at DEF CON 21, examining digital-forensics and practical defenses.

digital-forensicsincident-responsestatistical-analysis+1