I have been reminded once again that commercial tools can miss document metadata. Always read the release notes! It’s best practice to always test your tools to ensure you are not only getting accurate results but also as many results as possible! Scenario When using commercial products to some investigators trust the information from the commercial tools they paid licenses to use without validating the results using a secondary tool or reading the ‘release notes’ for caveats. If metadata is a new/confusing term for you then go read about it: But for those of us in the digital forensics and the field of information security metadata has always been critical to our investigations. So much knowledge can be gleamed from the review of metadata from pictures and documents that it’s a big topic in the news. Metadata is critical to any investigation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |