Daily Blog #491: Test Kitchen 9/27/18 - Sequential ObjectID Testing

Sequential ObjectID Testing by David Cowen - Hacking Exposed Computer Forensics Blog

Hello Reader,
        We had a short broadcast this evening to test and show how the timestamps within the ObjectIDs were being set and incremented.

We learned that:

  1. Files extracted in mass may have the same object ID timestamp
  2. Files created by the user should have incrementing object ID timestamps

I've uploaded the new script (ObjectIDScannerV2) to the TestKitchen Github:

Watch it here:

Post a Comment