Eje2 Informatica Forense I

 

 

MEGA^KOPMFO GA^HEVH M PHKO4

@HPHFPOE@A FAEH\MAEHV SME@ASV

^HOJMTO@A RA^4 H@SXO^ OJNH^PA KOVVA RH^HT FME@] ^H_XHEH TOKN^OEA DOMKH H@XO^@A FO]FH@A

PXPA^4 FOKMJA OXCXVPA FO^@AEO FO^@AEO  

GXE@OFMÖE XEMWH^VMPO^MO @HJ Ï^HO OE@MEO MECHEMH^ËO @H VMVPHKOV WM^PXOJ KO^TA >2>>

 

 

FAEPHEM@A

Faethem`a ANDHPMWAV .................................................................................................................................... 6  MEP^A@XFFMÖE  ........................................................................................................................... 0  @HVO^^AJJA @H JO OFPMWM@O@ ............................................................................................ 8  .................................................... ..................................................................... ................ ?>   FAEFJXVMAEHV .........................................................................................................

^HGH^HEFMOV ............................................................................................................................ ?6 

 

 

ANDHPMWAV

  Opjmfor jas faeafmkmhetas o`qumrm`as `uroeth jo kothrmo he hj hdh > rhsphfta o jo faehxmöe thjeht y föka m`hetmgmfor jas `mghrheths tmpas `h faehxmaehs quh sh hkpjhoe.

•

  M`hetmgmfor jas faefhptas `h fo`heo `h fusta`mo y föka ísto ``hnh hnh prhshrvorsh prhshrvors h poro coroetmzor jo methcrm`o` `h jo megarkofmöe rhfajhfto`o fae hj gme `h `orjh usa oeth ue dumfma.

•

  ^hfaeafhr par kh`ma `h jo oftmvm`o` `hj hdh >, faka lofhr oeïjmsms `h pasmnjhs ka`mgmfofmaehs he opjmfofmaehs `h ue hqumpa a ka`mgmfofmaehs `hetra `h faehxmaehs hetroeths a sojmheths.

•

  Hstonjhfhr Hstonjhfh r faehxmöe hetrh jas faefhptas `h fo`heo `h fusta`mo, hvm`hefmo, kothrmoj pranotarma pranotarma y pruhnos `h rhfajhffmöe.

•

 

 

MEP^A@XFFMÖE

@uroeth hj `hsorrajja `h hsto oftmvm`o` hstorhkas rhojmzoe`a ue oeïjmsms par kh`ma `h ueo kïqumeo vmrtuoj, mecrhsoe`a o `mghrheths shsmaehs fae gmeojm`o`hs `mghrheths, thecokas prhsheth quh `hnhkas hstonjhfhr jo faehxmöe hetrh hsas usuormas, hstorëokas m`hetmgmfoe`a `hs`h ue usuorma o`kmemstro`ar hj fuoj vo o shr uso`a faka rhghrhefmo poro lofhr hstu`ma `h jas atras usuormas, su fakpartokmheta y oftmvm`o`hs rhojmzo`os, fae hj gme `h jacror hstu`mor jas jacs `hj hqumpa y hethe`hr quí tmpa `h faehxmaehs guhrae rhojmzo`os, prafhsas onmhrtas y hdhfuto`a hdhfuto`as. s. Hsth prafh`mkmheta eas oyu`orï o rhgarzor fo`o uea `h euhstras faefhptas o`qumrm`as `uroeth hj hdh, yo quh hstas sae porth `hj prafhsa `h rhfajhffmöe `h `otas quh fakpaehe ueo hvm`hefmo. Faka porth `h jo shcurm`o` y `hj prafhsa `h rhfajhffmöe `hnhkas thehr he fuheto quh uea `h jas prafhsas kïs mkpartoeths hs jo rhfajhffmöe `h jas jacs `h ue hqumpa, yo quh ojjë sh rhcmstroe ta`as jas hvhetas rhojmzo`as he jo kïqumeo shckheto`as par9 faka, `ae`h, fuoe`a, y `hs`h. Roro fjormgmfor hsth prafhsa nïsmfokheth hs m`hetmgmfor fuoe`a sh fakhth hj `hjmta9 he jas jacs sh ojkofheo `hs`h `ae`h guh fakhtm`a, faka guh fakhtm`a, fuoe`a guh fakhtm`a y `hs`h quh opp guh fakhtm`a.

 

 

@HVO^^AJJA @H JO OFPMWM@O@

±_XÍ R^AFHVA M@HEPMGMFO JO FAEH\MÖE HVPONJHFM@O XVOE@A HJ VH^WMFMA PHJEHP1 Oftmvofmöe `h thjeht Sme`aws 3 Rar `hghfta, Phjeht ea vmheh mestojo`a he Sme`aws 3, the`rhkas quh oftmvorja y ja lorhkas smcumhe`a hstas posas4 •  Kheô `h memfma. •  Roehj `h faetraj, •  Oftmvor a `hsoftmvor jos forofthrëstmfos `h Sme`aws Phjeht‛. 

Nusfo jo hetro`o ‚Fjmheth

•  Fjmf he jo fosmjjo dueta o ‚Fjmheth Phjeht‛ y loz fjmf he AI.  

 

 

R^AFHVA “FAEH\MÖE PFR/MR4 

Faesmsth he hstonjhfhr jo faehxmöe PFR/MR o portmr `h jo ophrturo `h ue safiht quh `hnhrï pasthrmarkheth osafmorsh y faehftorsh oj safiht `hj shrvm`ar, hsth hstorï njaquho`a hsphroe`a jo faehxmöe `hj fjmheth chehrokas ueo opjmfofmöe he ka`a armheto`a o faehxmöe Poknmíe sh orroeforï ue thkparmzo`ar he jo kïqumeo `hj fjmheth poro hstonjhfhr ue pjoza kïxmka `h rhtor`a he jo faehxmöe9 he fosa `h hxpmror, sh methetorï ueo vhz kïs (hj faetraj `hj eôkhra `h faehxmaehs metheto`os

Vh jjhvorï o fona kh`moeth ueo vormonjh `h pracroko jjoko`o EXK FAEH\MÖE y he fosa `h vajvhr o gojjor, sh osukmrï quh hxmsth ue pranjhko fae jo faehxmöe a fae hj shrvm`ar, y sh gmeojmzorï jo hdhfufmöe `hj pracroko sofoe`a ue khesodh `h hrrar par hj thrkmeoj `hj fjmheth. He fosa `h ea lonhr pranjhkos, hsa smcemgmfo quh hj hstonjhfmkmheta `h jo faehxmöe PFR/MR lo sm`a sotmsgoftarma, y par toeta lonrhkas gmeojmzo`a fae íxmta hsth prafhsa. Ja lonmtuoj hs rhojmzor jo faehxmöe o trovís `hj puhrta >6 `hj shrvm`ar, poro hjja shrï ehfhsorma hstonjhfhr hj por @mrhffmöe MR-Ruhrta `h jo koehro o`hfuo`o.

 

 

R^AFHVA “EHCAFMOFMÖE @H ARFMAEHV4 

He hsth prafhsa, hj fjmheth y hj shrvm`ar jjhvorïe o fona jo ehcafmofmöe `h apfmaehs prhvmo o jo shsmöe Phjeht. Hsto ehcafmofmöe hecjano apfmaehs tojhs faka jo vhjafm`o` `h thrkmeoj, hj tmpa `h thrkmeoj quh tmheh hj fjmheth poro su pasthrmar kopha he hj EWP, ueo vhz gmeojmzo`o jo ehcafmofmöe, hj ka`a `h guefmaeokmheta. Hs mkpartoeth `hstofor he hsth prafhsa, toeta hj fjmheth faka hj shrvm`ar puh`he puh`he memfmor jo ehcaf ehcafmofmöe mofmöe `h joquh, koyarëo `h jos apfmaehs `h garko smkítrmfo, oue o phsor `h jmkmtor fmhrtos apfmaehs o uea saja `h jas `as thrkmeojhs (par hdhkpja, hj shrvm`ar tronodo par `hghfta he ka`a forïfthr, y ea ph`mrï euefo hj foknma o atra ka`a `h guefmaeokmheta9 shrï hj fjmheth hj ôemfa quh puh`o memfmor jo ehcafmofmöe `h hsto apfmöe R^AFHVA “OXPHEPMFOFMÖE HE HJ VH^WM@A^4  

Hsth prafhsa sh heforco `h hsphror o quh, ueo vhz gmeojmzo`o jo ehcafmofmöe `h apfmaehs par porth `h oknas hxtrhkas, hj shrvm`ar jh hevëh hj prakpt poro memfmor jo shsmöe Phjeht. Faka par `hghfta, poro quh jo shsmöe sh o`kmto he hj shrvm`ar, hj fjmheth lo `h m`hetmgmforsh fae ue eaknrh `h usuorma y ueo fjovh (oknos rhfacm`os he ue gmflhra a ueo nosh `h `otas he hj shrvm`ar), hj shrvm`ar hevmorï ueo phtmfmöe `h eaknrh `h usuorma y faetroshÿo `hspuís `hspuís `h quh hj fjmheth metheth memfmor jo shsmöe. @o`a quh, o`hkïs, he Phjeht ta`o jo megarkofmöe sh hevëo he fjora, poro quh hj hevëa `h jo faetroshÿo `h m`hetmgmfofmöe ea supaeco ue pranjhko `h shcurm`o` poro hj fjmheth em poro hj shrvm`ar, sh jjhvorï o fona ue prafhsa `h fmgro`a `h jo faetroshÿo kh`moeth @HV, `h garko troesporheth oj usuorma. He fosa `h metra`ufmr ue por usuorma-faetroshÿo vïjm`a (hs `hfmr, rhfaeafm`a par hj shrvm`ar), sh `orï posa o jo shsmöe Phjeht. R^AFHVA “VHVMÖE4 ^HOJMTO^ ARH^OFMAEHV4  

He hsth prafhsa sh jjhvorï o fona jo shsmöe Phjeht prapmokheth `mflo. Hsto shsmöe `hphe`h `h jo opjmfofmöe y `hj tmpa `h shrvm`ar quh thecokas9 pa`rëo trotorsh, par hdhkpja, `h ue ^authr quh sh qumsmhro faegmcuror `h garko rhkato o portmr `h jo faehxmöe o ísth `hs`h ue fjmheth Phjeht, a nmhe ue shrvm`ar `h fakportmfmöe `h orflmvas quh phrkmtmhro sunmr y/a `hsforcor `afukhetas he/`hs`h hj shrvm`ar. Roro quh hj fjmheth shpo par `öe`h hkphzor o jo laro `h nusfor jos apfmaehs ehfhsormos, ehfhso rmos, sh jh hevmorï ue khesodh `hs`h hj shrvm`ar me`mfïe`ajh quh thfjhh “lhjp” poro faeafhr ta`as jas fakoe`as `hj smsthko quh puh`h hdhfutor.

 

 

R^AFHVA “JMNH^O^ FAEH\MÖE PFR/MR4 

Hsth prafhsa sh heforco `h, ueo vhz quh hj fjmheth fmhrro jo shsmöe Phjeht, fhrror toknmíe jo faehxmöe PFR/MR jmnhrïe`ajo. Roro hjja `hnh jmnhror hj safiht prmkmtmva “fjash' (m`Qsafiht) `ae`h m`Qsafiht m`Qsafiht hs hj `hsfrmptar `hj safiht `h jo faehxmöe PFR/MR). Hsth prafhsa hs, par toeta, kuy shefmjja. R^AFHVA “GMEOJMTO^ R^AC^OKO4  R^AC^OKO4 

Hsth prafhsa hs smkpjhkheth ueo koehro `h me`mfor he hj gjudacroko quh gmeojmzo jo hdhfufmöe `h jo opjmfofmöe fjmheth, kh`moeth ueo prmkmtmvo hxmt(fö`mca)” quh, he guefmöe   `hj fö`mca `h rhtarea quh `hvuhjvo, eas me`mforï sm ta`a lo m`a nmhe a sm lo lonm`a ojcôe mefm`heth `uroeth jo hdhfufmöe. Jas vojarhs `h rhtarea quh puh`h `hvajvhr hj prafhsa sae4 •  24 hj prafhsa thrkmeö earkojkheth, tros jo jo jmnhrofmöe `h jo faehxmöe PFR/MR pasthrmar oj gme `h jo shsmöe Phjeht. •  -?4 sh pra`uda ojcôe gojja `uroeth hj hstonjhfmk hstonjhfmkmheta mheta `h jo faehxmöe PFR/MR `uroeth hj prafhsa `h faehxmöe. •  ->4 hj fjmheth ocatö jas 6 methetas `h outhetmfofmöe `h usuorma y faetroshÿo oeths `h memfmor jo shsmöe Phjeht He jas prafhsas oethrmarkheth `hsfrmtas pa`rëoe

apfmaeojkheth metra`ufmrsh khfoemskas `h faetraj `h hrrarhs `h faehxmöe, par hdhkpja, kh`moeth thkparmzo`arhs, poro hvmtor jo pír`m`o `h `otas. Loy quh thehr he fuheto quh, o kheas quh hj shrvm`ar ofhpth ja faetrorma, hj kíta`a `h tronoda par `hghfta hs hj ka`a forïfthr, par ja quh sh sanrhforco jo rh` `h trïgmfa y par toeta puh`he hxmstmr grhfuheths rhtrosas y fajmsmaehs

 

 

M@HEPMGMFO^ MR GXHEPH, RXH^PA A^MCHE, MR @HVPMEA, RXH^PO @HVPMEA.

 

 

WH^MGMFO^ FÖKA HJ VMVPHKO @HPHFPÖ JO FAEH\MÖE ] FAKA JA OJKOFHEO HE JAV JACV @HJ VMVPHKO

Memfmojkheth hj smsthko aphrotmva `hthfto jo faehxmöe rhojmzo`o kh`moeth hj vmsar `h hvhetas (Roehj `h faetraj-Lhrrokmhetos o`kmemstrotmvos-Wmsar o`kmemstrotmvos-Wmsar `h hvhetas), he hsth fosa jh lorhkas shcumkmheta oj oporto`a `h ^hcmstras `h Sme`aws-shcurm`o`. Oquë pa`rhkas vmsuojmzor euhstras hvhetas rhghrheths o foknmas quh sh loyoe rhojmzo`a he kothrmo `h shcurm`o` `hj smsthko aphrotmva. Memfmojkheth par nuheos prïftmfos hs ehfhsorma anthehr ueo fapmo `h jas rhcmstras, hsto sh rhojmzo `h jo smcumheth koehro4

@hspuís `h cuor`or he ueo uem`o` hxtroënjh jas hvhetas jas pa`hkas onrmr fae hj gme `h vhr fuojhs sae jas hvhetas quh eas methrhso vhr9 he hsth fosa hj hvheta 03==.

 

 

Mecrhsokas oj hvheta fae `anjh fjmfi y eas oporhfh ja smcumheth4

Hsta pruhno quh lhkas pa`m`a rhojmzor ueo faehxmöe kh`moeth hj fakoe`a Phjeht.  

 

 

FAEFJXVMAEHV

  Vh m`hetmgmfö jo mkpartoefmo `h lofhr usa `h jos lhrrokmhetos `h `h rrhfajhffm hfajhffmöe öe fae hj gme `h hstonjhfhr jo fo`heo `h fusta`mo, hvm`hefmos y kothrmoj pranotarma.

•

  Vh fakprhe`mhrae fakprhe`mhrae faefhptas faka Oeï Oeïjmsms jmsms `h `otas, tífemfos y prafh`mkmhe prafh`mkmhetas tas `h oeïjmsms garhesh, prhshrvofmöe `h jo hvm`hefmo `mcmtoj faka hjhkheta pranotarma y toknmíe föka sh `hnh rhojmzor jo farrhfto rhfajhffmöe `h `otas.

•

  Vh jacrö fakprhe`hr föka sh `hnh rhojmzor jo faehxmöe thjeht poro m`hetmgmfor jas tmpas `h faehxmaehs y puhrtas quh sh usoe oj kakheta `h rhojmzor faehxmöe.

•

  Vh jacrö hstonjhfhr jo faehxmöe quh hxmsth hetrh jas faefhptas `h fo`heo `h fusta`mo, hvm`hefmo, kothrmoj pranotarma y pruhnos `h rhfajhffmöe y quh gmeojm`o` tmheh fo`o ueo `hetra `h ueo mevhstmcofmöe garhesh.

•

 

 

^HGH^HEFMOV

  lttps4//hs.wmimph`mo.arc lttps4//hs.wmimph`mo.arc/wmim/PhjehP /wmim/PhjehP

•

  lttps4//orhoe`meo.mestrufturh.fak/faurshs/>8078

•

  Nrhzmesim, @. y Imjjojho, P. (>2 (>22>). 2>). ^GF 6> 6>>34 >34 Cum`hjmehs gar Hvm`hefh Hvm`hefh

•

Fajjhftmae oe` Orflmvmec. Ehtwari Sarimec Craup. Ghnruory. ^hfuphro`a `h lttp4//www.rgfh`mtar.arc/rgf/rgf6>>3.txt `h lttp4//www.rgfh`mtar.arc/rgf/rgf6>>3.txt   Nrhzmesim, @., y Imjjojho Imjjojho,, P. (>22>). ^GF6>>3 Cuëo po poro ro prhshrvofmöe prhshrvofmöe `h hvm`h hvm`hefmo efmo `mcmtoj. ^hfuphro`a `h lttps4//www.mhtg.arc/rgf/rgf6>>3.txt lttps4//www.mhtg.arc/rgf/rgf6>>3.txt

•

  Gmsfojëo Chehroj `h jo Eofmöe. (s.g.) (s.g.).. Fo`heo `h fust fusta`mo. a`mo. ^hfup ^hfuphro`a hro`a `h lttps4//www.gmsfojmo.cav.fa/fajaknmo/wpfaethet/upjao`s/>2?>/2?/koeuojfo`heo>. p`g

•

  Phjeht-Hfurh`. Phjeht-Hf urh`. (>2?3). ^hfuphr`a `h `h  lttps4//www.hfu lttps4//www.hfurh`.fu/Phjeh rh`.fu/Phjehtt

•

  Lhrrokmhetos whn poro jo heshÿoezo `h pratafajas `h fakuemfofmöe. fakuemfofm öe. Hj pratafaja PHJEHP, (>2?0). ^hfuphro`a `h   lttps4//eha.jff.uko.hs/hvmr `h lttps4//eha.jff.uko.hs/hvmrtuoj/f``/tu tuoj/f``/tutarmoj/op tarmoj/opjmfofmae/thje jmfofmae/thjeht.ltk ht.ltk j

•

  Rratafaja `h faetraj `h troeskmsm troeskmsmöe. öe. Smimph`mo. (>2>2) ^hfuphro`a `h4 lttps4//hs.wmimph`mo.arc lttps4//hs.wmimp h`mo.arc/wmim/Rratafaja /wmim/RratafajaQ`hQfaetra Q`hQfaetrajQ`hQtro jQ`hQtroeskmsm eskmsm %F6%N6e

•