To overcome the need for investigators to travel far and wide to gather evidence from infected computers after a cyberattack, a Kaspersky Lab expert has developed a simple tool that can remotely collect vital data without risk of its contamination or loss. Named BitScout, the tool can build a swiss-army knife for the remote forensic investigation of live systems and has been made freely available for all investigators to use.

 

In most cyberattacks, legitimate owners of compromised systems fall victim to unidentified perpetrators. Victims usually agree to cooperate and help security researchers find the infection vector or other details about the attackers.

 

However, it is a longstanding concern among forensic researchers that the need to travel long distances to collect crucial evidence such as malware samples from infected computers can result in expensive and delayed investigations.

The longer it takes for an attack to be understood, the longer it is before users are protected and perpetrators identified. However, the alternatives have either involved expensive tools and a knowledge of how to operate them, or the risk of contaminating or losing evidence by moving it between computers.

 

To solve the problem, Vitaly Kamluk, Director of Kaspersky Lab’s Global Research and Analysis Team in Asia Pacific (APAC) has created an open-source digital tool that can remotely collect key forensic materials, acquire full disk images via the network or locally attached storage, or simply remotely assist in malware incident handling.

 

Evidence data can be viewed and analyzed remotely or locally while the source data storage remains intact through reliable container-based isolation.

 

“The need to analyze security incidents as efficiently and swiftly as possible is increasingly important, as adversaries grow ever more advanced and stealthy. But speed at all costs is not the answer either – we need to ensure evidence is untainted so that investigations are trusted and results can be qualified for use in court if required. I couldn’t find a tool that allowed us to achieve all of this, freely and easily – so I decided to build one,” said Vitaly Kamluk.

 

Kaspersky Lab experts work closely with law enforcement agencies across the world to help in the technical analysis of cyber investigations. This gives them a unique insight into the challenges LEA personnel face when fighting modern cybercrime.

 

The cybersecurity landscape is now so complex and sophisticated that investigators need tools that can adapt and scale to the demands of the job. BitScout is a good example of this. It can be adjusted to the particular needs of an investigator, and improved and upgraded with additional features and custom software.

 

Most importantly it comes free of charge, based on open-source solutions and is fully transparent: instead of relying on third party tools with proprietary code, experts can use the Bitscout open-source code to build their own swiss-army knife for digital forensics.

 

The list of BitScout features includes:

●Disk image acquisition even with un-trained staff

●Training people on the go (shared view-only terminal session)

●Transferring complex pieces of data to your lab for deeper inspection

●Remote Yara or AV scanning of offline systems (essential against rootkits)

●Search and view registry keys (autoruns, services, plugged USB devices)

●Remote file carving (recovering deleted files)

●Remediation of the remote system if access is authorized by the owner

●Remote scanning of other network nodes (useful for remote incident response)

 

The tool is freely available at the GitHub code repository: https://github.com/vitaly-kamluk/bitscout

 

Read more on Securelist.com.


RECOMMENDED ARTICLE FOR TECHWORLD


 
Killer Messages on SONY PlayStation 4 and How to Deal with Them
Techworld Date Posted: 12 November 2018 4:45 PM | 127 Views
  Not everyone knows that SONY PlayStation 4 (PS4) has its own instant messenger: PlayStation Messages. There are also app versions for Android and iOS, so that it can be used not only on.... See More
 
Killer Messages on SONY PlayStation 4 and How to Deal with Them
Techworld Date Posted: 4:45 PM | 127 Views
  Not everyone knows that SONY PlayStation 4 (PS4) has its own instant messenger: PlayStation Messages. There are also app versions for Android and iOS, so that it can be used not only on...See More

 
Kaspersky Interactive Protection Simulation Online Game Aims to Improve Cybersecurity Cooperation in PH Companies
Techworld Date Posted: 19 July 2018 3:08 PM | 601 Views
Kaspersky Lab conducted its first Kaspersky Interactive Protection Simulation Online training (KIPS Online) with the local technology media recently to highlight the importance of teamwork in corporate cybersecurity.   KIPS Online is a valuable.... See More
 
Kaspersky Interactive Protection Simulation Online Game Aims to Improve Cybersecurity Cooperation in PH Companies
Techworld Date Posted: 3:08 PM | 601 Views
Kaspersky Lab conducted its first Kaspersky Interactive Protection Simulation Online training (KIPS Online) with the local technology media recently to highlight the importance of teamwork in corporate cybersecurity.   KIPS Online is a valuable...See More

 
MMD Philippines Introduces New Lineup of AOC and Philips Monitors
Techworld Date Posted: 31 October 2018 5:29 PM | 180 Views
AOC, the number one monitor brand in the Philippines known for their impeccable quality gaming monitors, and Philips, a well-known brand for making high-performance and innovative display solutions for home and businesses, proudly launch.... See More
 
MMD Philippines Introduces New Lineup of AOC and Philips Monitors
Techworld Date Posted: 5:29 PM | 180 Views
AOC, the number one monitor brand in the Philippines known for their impeccable quality gaming monitors, and Philips, a well-known brand for making high-performance and innovative display solutions for home and businesses, proudly launch...See More

 
Get the New iPad 6th Gen from Smart Bro at Php999 per Month
Techworld Date Posted: 24 July 2018 11:16 AM | 394 Views
Looking for the perfect learning tool for your child or a fun and entertaining device to share with your kid?   Look no further as Smart Bro makes it a lot easier for you.... See More
 
Get the New iPad 6th Gen from Smart Bro at Php999 per Month
Techworld Date Posted: 11:16 AM | 394 Views
Looking for the perfect learning tool for your child or a fun and entertaining device to share with your kid?   Look no further as Smart Bro makes it a lot easier for you...See More

 
Apacer Launches the AH336 and AC233 in Partnership with P714
Techworld Date Posted: 3 November 2017 10:45 AM | 358 Views
When pursuing a dream, we all need the support and company of friends. Apacer partnered with P714, a Taiwanese illustration brand famous for their heartwarming, adorable designs, in creating 3 special edition flash drives.... See More
 
Apacer Launches the AH336 and AC233 in Partnership with P714
Techworld Date Posted: 10:45 AM | 358 Views
When pursuing a dream, we all need the support and company of friends. Apacer partnered with P714, a Taiwanese illustration brand famous for their heartwarming, adorable designs, in creating 3 special edition flash drives...See More

 
Digital Transformation (DX) Leads the Philippines Outsourcing Market to Hit US$500 Million by 2021
Techworld Date Posted: 24 August 2017 10:16 AM | 240 Views
The total outsourcing services spending in the Philippines is expected to exceed US$500 million by 2021, according to the latest forecast from theIDC APeJ Semiannual Services Tracker. Enterprises' Digital Transformation (DX) initiatives, as well.... See More
 
Digital Transformation (DX) Leads the Philippines Outsourcing Market to Hit US$500 Million by 2021
Techworld Date Posted: 10:16 AM | 240 Views
The total outsourcing services spending in the Philippines is expected to exceed US$500 million by 2021, according to the latest forecast from theIDC APeJ Semiannual Services Tracker. Enterprises' Digital Transformation (DX) initiatives, as well...See More

 
Get Lucky with MSI Gaming PH’s Treasure Hunt Promo Starting This January
Techworld Date Posted: 24 January 2018 4:49 PM | 335 Views
MSI, one of the leading gaming laptop brands, announces their “Treasure Hunt” promo in celebration with the upcoming Chinese New Year. . See More
 
Get Lucky with MSI Gaming PH’s Treasure Hunt Promo Starting This January
Techworld Date Posted: 4:49 PM | 335 Views
MSI, one of the leading gaming laptop brands, announces their “Treasure Hunt” promo in celebration with the upcoming Chinese New Year. See More

 
ViewSonic to Showcase Professional Monitors as the Priority Brand at Canon Photomarathon Philippines 2017
Techworld Date Posted: 17 October 2017 3:12 PM | 308 Views
Manila, Philippines- ViewSonic Corp., a leading global provider of visual solution products, will join the Canon Photomarathon Philippines 2017 on the 21st of October as the priority professional monitor brand.. See More
 
ViewSonic to Showcase Professional Monitors as the Priority Brand at Canon Photomarathon Philippines 2017
Techworld Date Posted: 3:12 PM | 308 Views
Manila, Philippines- ViewSonic Corp., a leading global provider of visual solution products, will join the Canon Photomarathon Philippines 2017 on the 21st of October as the priority professional monitor brand.See More

 
World-Renowned Photo-Editing App Publisher Launches ArtBot
Techworld Date Posted: 19 December 2017 8:59 AM | 289 Views
Meitu Inc., publisher of the world renowned photo-editing app Meitu, is dedicated to the pursuit of beauty around the world.. See More
 
World-Renowned Photo-Editing App Publisher Launches ArtBot
Techworld Date Posted: 8:59 AM | 289 Views
Meitu Inc., publisher of the world renowned photo-editing app Meitu, is dedicated to the pursuit of beauty around the world.See More

 
Study Reveals More Than Half of Asia Pacific Consumers Prioritize Security over Convenience in their App Experience
Techworld Date Posted: 24 August 2018 4:28 PM | 83 Views
Consumers will now trade app convenience for security, according to a study commissioned by F5 Networks (NASDAQ: FFIV) ‘The Curve of Convenience – the trade-off between security and convenience’. . See More
 
Study Reveals More Than Half of Asia Pacific Consumers Prioritize Security over Convenience in their App Experience
Techworld Date Posted: 4:28 PM | 83 Views
Consumers will now trade app convenience for security, according to a study commissioned by F5 Networks (NASDAQ: FFIV) ‘The Curve of Convenience – the trade-off between security and convenience’. See More


Power by

Download Free AZ | Free Wordpress Themes