Running FTK Imager from a Thumb drive or CD At times you may be required to image a system that cannot be powered down for the acquisition. This might be a server running vital applications or a workstation from which you need certain files for preliminary investigation. You can run FTK Imager from a thumb drive or a CD to create a disk image or to image certain folders of a live system. You can..

USBDeview USB 정보를 분석할 수 있는 도구 http://www.nirsoft.net/utils/usb_devices_view.html 다운로드하기 페이지 하단부분에서 Download 링크 클릭 직접다운로드

Mitec Windows Registry Recovery Portable http://www.mitec.cz/wrr.html 실행화면 직접다운로드

ZeroAccess, Volatility, and Kernel Timers http://mnin.blogspot.kr/2011/10/zeroaccess-volatility-and-kernel-timers.html As today is Volatility Friday, we'll discuss how to hunt ZeroAccess in memory by following the lead of several others and then writing our own custom plugin. I first want to recognize the work done on this topic by Frank Boldewin, Giuseppe Bonfa, and Marco Giuliani. They are the..

실행하기 exe파일 실행 OK 실행화면!!! Scan computer 버튼 클릭 분석결과

Runscanner startup and hijack analyzer portable Runscanner site http://www.runscanner.net/ 다운로드 상단의 Download 링크 클릭 > Freeware Download버튼 클릭 직접다운로드