Working on Viruses from Home owing to Coronavirus? Here’s a Handy Remote Forensics Tool, Bitscout

Table of Contents

Include to favorites

Now with Bulk Extractor, Loki, and RegRipper

IT stability professionals compelled to work from home in coming weeks owing to coronavirus (many firms are now mandating it) can get all set to do some of their work on a new release of an open up source device made for remote digital forensics, called Bitscout.

A customisable stay OS constructor device made to assist customers generate remote forensics bootable disk visuals, Bitscout was first open up sourced by Russia’s Kaspersky Lab two years in the past but seems to have seen limited traction.

In a fresh drive, Kasperky emphasised its free of charge and absolutely open up source mother nature: customers are free of charge to reverse-engineer and modify any part of it.

Bitscout allows customers like malware scientists, digital forensics specialists and incident responders to analyse digital proof. (Kaspersky Lab’s Vitaly Kamluk says the device was born though he was performing at the Electronic Forensics Lab at INTERPOL).

Bitscout twenty.04: What is New?

A new release, twenty.04, will come packed with handy new open up source resources. Now baked in:

RegRipper, an open up source device, created in Perl, for extracting/parsing details (keys, values, knowledge) from the Registry and presenting it for evaluation.

Bulk Extractor, a programme that extracts characteristics this sort of as electronic mail addresses, credit rating card figures, URLs, and other varieties of details from digital proof files

Loki, a scanner for very simple indicators of compromise (IoCs) that allows Blue Workforce or other customers examine file identify IoCs (regex match on full file route/identify), and carry out Yara rule checks, hash checks and C2 back link checks.