Advances In Anti-Forensic: In-Memory Distributed Hidden Storage

No ratings

Presented at KiwiCon 2007 by

Jabra

During this short talk we will present a new way to hide a file in-memory under Unix (nothing is written on disk). With the help of a proof-of-concept (DHIS - Distributed Hidden Storage) we will show that once hidden it's almost impossible to reconstitute the whole file for a forensic expert. We will also show how to prevent such technique.