Comment on "Forensics for Prosecutors" mentions backdoor in TrueCrypt (page 15) [pdf]Comments−noname999_66613yAnybody ever heard of the "zSearch" software mentioned in the pdf?After some more digging, found this document: http://www.ndsaa.org/Computer_Forensics_for_Prosecutors.pdfWhich states:Free product by SA Eric ZimmermanRandom Access Memory Analysis:* FBI - Salt Lake City, UT* Distribution - eric[at]feeble-industries.com* Plug-in live triage via USB* Virtualization, encryption, mass storage, P2P, Gigatribe, picture & video preview, password gathering, and MORE!Looks LE agents can request a copy by registering for the guy's phpbb form here (judging by the registration terms, it's not open to the public):https://feeble-industries.com/forums/ucp.php?mode=register−XEKEP13yThere is more regarding zSearch: "... computer search tool called osTriage/zSEARCH. The search tool allows investigators to find child pornography without damaging the forensic integrity of a computer." http://attorneygeneral.utah.gov/PR_122011.html
Comments
Anybody ever heard of the "zSearch" software mentioned in the pdf?
After some more digging, found this document: http://www.ndsaa.org/Computer_Forensics_for_Prosecutors.pdf
Which states:
Free product by SA Eric Zimmerman
Random Access Memory Analysis:
* FBI - Salt Lake City, UT
* Distribution - eric[at]feeble-industries.com
* Plug-in live triage via USB
* Virtualization, encryption, mass storage, P2P, Gigatribe, picture & video preview, password gathering, and MORE!
Looks LE agents can request a copy by registering for the guy's phpbb form here (judging by the registration terms, it's not open to the public):
https://feeble-industries.com/forums/ucp.php?mode=register
There is more regarding zSearch: "... computer search tool called osTriage/zSEARCH. The search tool allows investigators to find child pornography without damaging the forensic integrity of a computer." http://attorneygeneral.utah.gov/PR_122011.html