Sumuri

Test3

admin — Thu, 15 Dec 2011 07:07:21 +0000

Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry’s standard dummy text ever since the 1500s, when an unknown printer took a galley of type and scrambled it to make a type specimen book. It has survived not only five centuries, but also the leap into electronic typesetting, remaining essentially unchanged. It was popularised in the 1960s with the release of Letraset sheets containing Lorem Ipsum passages, and more recently with desktop publishing software like Aldus PageMaker including versions of Lorem Ipsum.

Paladin USB

admin — Thu, 15 Dec 2011 07:03:22 +0000

PALADIN USB Shipping Now!

Includes 6″ USB Extension Cable and Case!

Forensic Acquisition and Preview – Simplified

PALADIN USB version is a modified Live Linux distribution based on Ubuntu that simplifies the process of creating forensic images in a forensically sound manner. PALADIN was designed with the understanding that many of those tasked with creating forensic images are not comfortable with using the command-line but still want to utilize the power of Linux. PALADIN was also designed with the understanding that many agencies or companies have limited budgets.

Why Use PALADIN?

PALADIN is incredibly easy to use and eliminates the need to remember confusing commands and switches.
PALADIN will work on any computer or hardware that is supported by Ubuntu Linux.
PALADIN allows a user to safely image and preview internal hard drives without having to disassemble the computer or laptop.
PALADIN has been modified to write-protect all attached media upon boot thereby preventing accidental writes or having to use expensive physical write-blockers.

PALADIN USB Key Features

Wicked-cool credit-card style USB thumbdrive!
Boot standard PCs in a forensically sound manner
Much quicker startup times compared to the CD
Image to several formats including Expert Witness (.E01), Apple Disk Image (.dmg) and Raw (.dd)
Clone devices
Create two forensic images or clones at the same time
Image across a network
Format any drive as NTFS, HFS+, FAT32 or EXT3
Create a forensic image of only the Unallocated Space, Free Space and File Slack
Quickly wipe (sterilize), verify and hash media
Automatically update via Internet
Search and preview media by file name, keywords or MIME types

PALADIN USB currently does not support booting of Intel Macs, however, this is supported by the free CD version of PALADIN which can be downloaded from www.sumuri.com.

All proceeds from the sale of PALADIN USB are used to fund development and keep the CD version free for everyone!

Thanks for your support!

MFSC

admin — Thu, 15 Dec 2011 06:50:21 +0000

SUMURI’s Macintosh Forensic Survival Course (MFSC) has been designed by the top experts and practitioners in the field of Macintosh forensics. SUMURI is recognized as a leader in computer forensic and incident response training worldwide. SUMURI’s Macintosh Forensic Survival Course is designed knowing that an examiner must be able to successfully testify in a court of law, work within limited budgets and high case loads, develop comprehensive reports and process cases in a “no nonsense” and timely fashion. Our training was designed for the student to learn what is needed with a no one left behind attitude in a team work atmosphere with hands on training. Students will walk away with the skills necessary to properly seize, acquire, analyze and document an examination of an Intel-based Macintosh computer in a forensically sound manner. Unlike most instructional environments, our forensic training is conducted without relying on automated forensic tools, allowing the participant to apply what is learned to any tool in their forensic arsenal. The training was built upon a systematic approach for forensic examination of a Macintosh from start to finish, in a way that just makes logical sense. Additionally, our training and materials are designed to be used as a supplemental reference library to allow an examiner to utilize what was learned after course completion, and when it’s time for the next Mac exam. And as an added bonus, we also provide supplemental instruction on advanced topics such as working with NTFS media, and the forensic examination of Apple iPod® and iPhone® devices.
COURSE SCHEDULE:

Day ONE
Introduction and Course Overview
Non-Intel Mac Issues (PowerPC and Classic OS)
Overview of Mac OSX Versions
Introduction to the Mac OS X and the Desktop
Mac File System Basics
Intel Mac Technology and Bootcamp

Day TWO
Mac Security Issues and Cracking FileVault
Setting up a Mac for Forensic Use
Macintosh Search and Seizure
Obtaining System Information (Date and Time)
Bypassing Open Firmware Passwords
Collecting Volatile Data

Day THREE
Manual Imaging an Acquisition
Automated Imaging and Acquisition
Verifying and Safely Mounting Forensic Images
Indexing Forensic Images
Search Techniques Using Mac OSX

Day FOUR
Locating Evidence (Email, Graphics, Internet Artifacts,
Documents, System Artifacts, Instant Messaging, Peer
to Peer, Logs files)
Recovering Deleted Files
Using Leopard Technology for Forensics (QuickView,
CoverFlow, Forensic User Accounts)
Report Development
iPod® Forensics
Overview of iPhone Processing

Day FIVE
Practical Skills Assessment
Working with NTFS
Review of Recommended Applications
Review of Automated Forensic Tools
Recommended Macintosh Hardware Requirements
for Forensics.

ALL STUDENTS RECEIVE:
• Course Manual
• PALADIN Acquisition & Preview Disc
• Mediafour MacDrive Software
• Parallels for Mac
• File Juicer
• Emailchemy
• iPod® Video Nano

Registration for upcoming training courses can be found here.