Category: Forensics

Written by Vladimir Remenar

Postmortem

Što je postmortem? Lessons-Learned? Pojam mijenja naziv ovisno o kojoj grani industrije se radi. Zajedničko svima je – otkriti uzrok incidenta kako bi se u budućnosti minimizirao rizik ponavljanja istog incidenta. Bitno je da ne otkrivamo krivca. Ne igramo “the blame game”. Otkrivamo uzrok u sustavu, proceduri ili procesu koji je doveo do incidenta. Gotovo nikad je uzrok namjerna ljudska intencija. I tako se trebamo postaviti kada krećemo u postmortem analizu.

Neke grane industrije su iznimno rigorozne što se tiče postmortem procedura. Primjerice avio prijevoz. S druge strane u nekim granama industrije i ne postoji. Najčešće ako nije mandatorno zakonom ili regulativom provoditi postmortem analize – ne provode se. A ako sam nešto naučio iz Black Box Thinking – postmortem analize su ključ za napredak.

Pojedine tvrtke su svjesne te činjenice. Ne samo da provode postmortem analize već i javno objavljuju. Neke postmortem analize su i više od same analize, to su fantastični eseji koje je užitak pročitati. Primjerice, analize Spotify, Cloudflare, GitHub, Facebook, itd.

Written by Vladimir Remenar

Kali 2019.4

Kali Linux 2019.04 je dostupan za preuzimanje. Ovo je zadnja 2019.x verzija. U ovom izdanju nema puno promjena ali jedna promjena je značajna. Gnome je zamijenio Xfce. Promjena je logična obzirom da je Kali namijenjen pokretanju na raznim uređajima koji su ponekad okrljaštenog hardvera. Xfce je znatno “lakši” u odnosu na Gnome pa bi korisničko […]

Written by Vladimir Remenar

The Framework of e-Forensics in the Republic of Croatia

With the development of information communication systems and the services they provide, the complexity of the organization of information within information systems is growing. The complexity itself contributes to the increase in the number of electronic incidents and affects the high demands of forensic procedure implementation. It is estimated that in the near future the number of electronic incidents will outgrow the number of classical criminal incidents both financially and quantitatively. Due to the things mentioned above, early identification, discovering and taking legal proceedings against the perpetrator of an electronic incident are necessary. It is necessary to investigate all electronic incidents adequately and promptly and adapt the legal framework and laws related to e-Forensics. e-Forensics is a relatively new discipline within which there is a low level of standardization and consistency. With the purpose of increasing the quality of performing e-Forensics and presenting the evidence in a possible judicial proceeding one has to define the legal framework of e-Forensics. The analysis of current legal standards and methods used to perform e-Forensics is presented in the paper as well as the proposal of performing e-Forensics with defined procedures and methods.