The document discusses forensic tools for Mac OS and Linux operating systems. It compares tools like Network Miner and NMAP to Hex Workshop and validates them based on software verification and validation. It also demonstrates exploring different file formats like Excel, Word, JPEG, GIF and MOV in the Hex Editor Hxd.

1. GLOBALWEBTUTORS.COM
GLOBALWEBTUTORS.COM
DIGITAL FORENSIC
ASSIGNMENTHELP

2. Forensics Tools
for Mac and Linux
Operating
Systems
GLOBALWEBTUTORS.COM

3. OBJECTIVE
 The objective of this power point presentation is to understand the
different Mac OS and Linux Digital Forensic Tools. This also
explains how to explore files in Hex Workshop
 Comparing the similarity of these tools with Hex workshop and
validating them on the basis of software validation and
verification.
 Brief explanation of Mac OS and Linux tools.
 These slides cover a process of exploring 5 different formats in
Hex Editor Hxd.
GLOBALWEBTUTORS.COM

4. Part 1: Forensics Tools for Mac and Linux Operating Systems
The federal rule of evidence has control the use of digital evidence, thus we need to
obtain the evidence in the digital media . The process of obtaining evidence from these
computer is known as computer forensic. Most of the forensic works on windows but
there are some that works on Mac OS and Linux.
Comparing Mac And Linux Tools With Hex Workshop
The tools are compared in terms of physical data , logical data, command line , hashing
filtration , data viewing , decrypting.
Network Miner and Network Mapper with Hex Workshop. Both the tools are similar to
Hex Workshop.
GLOBALWEBTUTORS.COM

5. Validation Of Tools
 Software verification :- It provides objective evidence that the design
outputs of a particular phase of the software development life cycle meet all of the
specified requirements for that phase.
 Software verification looks for consistency, completeness, and correctness of the
software and its supporting documentation, as it is being developed, and provides
support for a subsequent software is being validated.
 Software testing is one of many verification activities intended to confirm that
software development output meets its input requirements. Other verification
activities include various static and dynamic analyses, code and document
inspections, walkthroughs, and other techniques.
GLOBALWEBTUTORS.COM

6. Validation Of Tools
 It is a part of the design validation for a finished device and considers software
validation to be ‘confirmation by examination and provision of objective
evidence.
 software validation activities may occur both during, as well as at the end of
the software development life cycle to ensure that all requirements have been
fulfilled.
 The validation of software typically includes evidence that all software
requirements have been implemented correctly and completely and are
traceable to system requirements.
 A conclusion that software is validated is highly dependent upon
comprehensive software testing, inspections, analyses, and other verification
tasks performed at each stage of the software development life cycle.
GLOBALWEBTUTORS.COM

7. Mac OS and Linux Tool
 Network Miner
 An interesting network forensic analyzer for Linux & MAC OS
X to detect OS, hostname, sessions and open ports through packet
sniffing or by PCAP file. Network Miner provide extracted
artifacts in an intuitive user interface.
 NMAP
 NMAP(Network Mapper) is one of the most popular networks
and security auditing tools. NMAP is supported on most of the
operating systems Linux, SMAC OS, etc. It’s open source so free.
GLOBALWEBTUTORS.COM

8. Part2: Hex Workshop to Explore Files
 To explore files using Hxd Hex Editor 5 different file format are
explored such as :- Excel file(.els) Microsoft Word (.doc and
.docx), .gif, .jpg and movie format (.mov)
1. The above 5 files samples are created.
2. HxD Hex Editor Launched.
3. The above sample files are being imported into Hex Editor.
GLOBALWEBTUTORS.COM

9. 9. JPEG file type.
GLOBALWEBTUTORS.COM

10. 10. GIF file type.
GLOBALWEBTUTORS.COM

11. https://globalwebtutors.com/
 The forensic examination of tools has undoubtedly been a
huge success in the identification of cyber and computer-
assisted crime. Organizations are placing an increasing
importance on the need to be equipped with appropriate
incident management capabilities to handle misuse of
systems. HxD hex editor is an invaluable tool in the process.
GLOBALWEBTUTORS.COM