Python Forensics in Linux A major concern in digital investigations is protecting valuable evidence or data using encryption or any other format. A fundamental example is storing passwords. Therefore, it is essential to understand how the Linux operating system is…
Python Forensics – Mobile Forensics Forensic investigation and analysis of standard computer hardware, such as hard drives, has developed into a stable discipline, aided by techniques for analyzing non-standard hardware or transient evidence. While smartphones are increasingly being used in…
Python Forensics – Virtualization Virtualization is the process of emulating IT systems, such as servers, workstations, networks, and storage. It simply creates a virtual, rather than actual, version of any operating system, server, storage device, or network process. The main…
Python Forensics Tutorial Python has built-in capabilities for supporting digital investigations and protecting the integrity of evidence during investigations. In this tutorial, we will explain the fundamental concepts of applying Python to computational (digital) forensics, including extracting evidence, collecting basic…
Python Forensics – Cloud Computing Implementation Cloud computing can be defined as a collection of hosted services provided to users over the internet. It enables enterprises to consume even computing resources, including virtual machines (VMs), storage, or applications as utilities.…
Python Forensics – Hash Functions A hash function is defined as a function that maps a large amount of data to a fixed value of a specified length. This function ensures that the same input produces the same output, which…
Python Forensics – Python Installation Since we need Python for all our computational forensics activities, let’s take a step-by-step look at how to install it. Step 1 – Go to and download the Python installation file based on your…
Python Forensics – Introduction Python is a general-purpose programming language with easy-to-read code, making it easy for both professional and novice programmers to understand. Python includes many useful libraries and can be used with any stack framework. Many laboratories rely…
Python Forensics – Network Forensics Modern network environments are such that investigations can be fraught with difficulties. This can occur when you are responding to vulnerability support requests, investigating internal activities, performing vulnerability-related assessments, or verifying regulatory compliance. Network Programming…
Python Forensics – Memory and Forensics In this chapter, we will focus on investigating volatile memory with the help of Volatility, a Python-based forensics framework for the following platforms: Android and Linux. Volatile Memory Volatile memory is a type of…