To overcome the need for investigators to travel far and wide to gather evidence from infected computers after a cyberattack, a Kaspersky Lab expert has developed a simple tool that can remotely collect vital data without risk of its contamination or loss. Named BitScout, the tool can build a swiss-army knife for the remote forensic investigation of live systems and has been made freely available for all investigators to use.

 

In most cyberattacks, legitimate owners of compromised systems fall victim to unidentified perpetrators. Victims usually agree to cooperate and help security researchers find the infection vector or other details about the attackers.

 

However, it is a longstanding concern among forensic researchers that the need to travel long distances to collect crucial evidence such as malware samples from infected computers can result in expensive and delayed investigations.

The longer it takes for an attack to be understood, the longer it is before users are protected and perpetrators identified. However, the alternatives have either involved expensive tools and a knowledge of how to operate them, or the risk of contaminating or losing evidence by moving it between computers.

 

To solve the problem, Vitaly Kamluk, Director of Kaspersky Lab’s Global Research and Analysis Team in Asia Pacific (APAC) has created an open-source digital tool that can remotely collect key forensic materials, acquire full disk images via the network or locally attached storage, or simply remotely assist in malware incident handling.

 

Evidence data can be viewed and analyzed remotely or locally while the source data storage remains intact through reliable container-based isolation.

 

“The need to analyze security incidents as efficiently and swiftly as possible is increasingly important, as adversaries grow ever more advanced and stealthy. But speed at all costs is not the answer either – we need to ensure evidence is untainted so that investigations are trusted and results can be qualified for use in court if required. I couldn’t find a tool that allowed us to achieve all of this, freely and easily – so I decided to build one,” said Vitaly Kamluk.

 

Kaspersky Lab experts work closely with law enforcement agencies across the world to help in the technical analysis of cyber investigations. This gives them a unique insight into the challenges LEA personnel face when fighting modern cybercrime.

 

The cybersecurity landscape is now so complex and sophisticated that investigators need tools that can adapt and scale to the demands of the job. BitScout is a good example of this. It can be adjusted to the particular needs of an investigator, and improved and upgraded with additional features and custom software.

 

Most importantly it comes free of charge, based on open-source solutions and is fully transparent: instead of relying on third party tools with proprietary code, experts can use the Bitscout open-source code to build their own swiss-army knife for digital forensics.

 

The list of BitScout features includes:

●Disk image acquisition even with un-trained staff

●Training people on the go (shared view-only terminal session)

●Transferring complex pieces of data to your lab for deeper inspection

●Remote Yara or AV scanning of offline systems (essential against rootkits)

●Search and view registry keys (autoruns, services, plugged USB devices)

●Remote file carving (recovering deleted files)

●Remediation of the remote system if access is authorized by the owner

●Remote scanning of other network nodes (useful for remote incident response)

 

The tool is freely available at the GitHub code repository: https://github.com/vitaly-kamluk/bitscout

 

Read more on Securelist.com.


RECOMMENDED ARTICLE FOR TECHWORLD


 
Top F&B Distribution Company Multi-M Food Corporation Initiates Digital Transformation on the Cloud
Techworld Date Posted: 18 February 2019 11:05 AM | 511 Views
One of the top distribution companies of food service chains in the country, Multi-M Food Corporation (MMFC) announced that they are kicking off their digital transformation journey to transform their operations to continue their.... See More
 
Top F&B Distribution Company Multi-M Food Corporation Initiates Digital Transformation on the Cloud
Techworld Date Posted: 11:05 AM | 511 Views
One of the top distribution companies of food service chains in the country, Multi-M Food Corporation (MMFC) announced that they are kicking off their digital transformation journey to transform their operations to continue their...See More

 
Providing the Brain behind Electronic Eyes
Techworld Date Posted: 18 July 2017 3:03 PM | 99 Views
XjeraLabs relies on NVIDIA Tesla technology to deliver automated, accurate video analytics to drive business and smart city insights XjeraLabs aims to be the leading artificial intelligence (AI) video analytics company in the world. Established.... See More
 
Providing the Brain behind Electronic Eyes
Techworld Date Posted: 3:03 PM | 99 Views
XjeraLabs relies on NVIDIA Tesla technology to deliver automated, accurate video analytics to drive business and smart city insights XjeraLabs aims to be the leading artificial intelligence (AI) video analytics company in the world. Established...See More

 
GOC GEC First Time in Thailand: World Record Broken during GALAX Overclocking & eSports Carnival
Techworld Date Posted: 1 December 2017 3:14 PM | 82 Views
It’s a big day for GALAX the past weekend. The GALAX 9th Overclocking & eSports Carnival were concluded with success last Saturday.. See More
 
GOC GEC First Time in Thailand: World Record Broken during GALAX Overclocking & eSports Carnival
Techworld Date Posted: 3:14 PM | 82 Views
It’s a big day for GALAX the past weekend. The GALAX 9th Overclocking & eSports Carnival were concluded with success last Saturday.See More

 
#DiscoverRealValue with realme Philippines’ New Smartphone this March
Techworld Date Posted: 1 March 2019 4:03 PM | 79 Views
Game-changer smartphone brand realme confirms bringing a new phone to the Philippine market third week of March. Similar to its predecessor the realme C1, the new phone is expected to make fans discover. See More
 
#DiscoverRealValue with realme Philippines’ New Smartphone this March
Techworld Date Posted: 4:03 PM | 79 Views
Game-changer smartphone brand realme confirms bringing a new phone to the Philippine market third week of March. Similar to its predecessor the realme C1, the new phone is expected to make fans discoverSee More

 
Nokia Gets into the Beat of the New Year
Techworld Date Posted: 9 January 2018 1:36 PM | 489 Views
Get into the Beat this new year with HMD Global, the home of Nokia phones. With any purchase of a Nokia Android smartphone, consumers will receive a free JBL GO Portable Bluetooth Speaker.. See More
 
Nokia Gets into the Beat of the New Year
Techworld Date Posted: 1:36 PM | 489 Views
Get into the Beat this new year with HMD Global, the home of Nokia phones. With any purchase of a Nokia Android smartphone, consumers will receive a free JBL GO Portable Bluetooth Speaker.See More

 
Realme Philippines makes biggest introductory offline sales record with realme 5 Pro
Techworld Date Posted: 16 October 2019 9:09 AM | 312 Views
Realme Philippines makes biggest introductory offline sales record with realme 5 Pro. See More
 
Realme Philippines makes biggest introductory offline sales record with realme 5 Pro
Techworld Date Posted: 9:09 AM | 312 Views
Realme Philippines makes biggest introductory offline sales record with realme 5 ProSee More

 
Kingston and Authorized Partners to Bring High-Quality Storage Solutions to the Philippines
Techworld Date Posted: 22 March 2019 9:45 AM | 103 Views
Kingston Technology, a world leader in memory storage products and technology solutions, has teamed up with channel partners to promote the authorized partner program in the Philippines. Ranked as the World’s No. 1 memory.... See More
 
Kingston and Authorized Partners to Bring High-Quality Storage Solutions to the Philippines
Techworld Date Posted: 9:45 AM | 103 Views
Kingston Technology, a world leader in memory storage products and technology solutions, has teamed up with channel partners to promote the authorized partner program in the Philippines. Ranked as the World’s No. 1 memory...See More

 
Apacer AH790 Lightning Swivel USB Flash Drive for iPhone/iPad Expanding more External Memory in Your Apple Devices
Techworld Date Posted: 28 September 2017 3:23 PM | 99 Views
Apacer, a mobile storage solution expert, introduces AH790 dual interface swivel flash drive for iOS devices. Aesthetically built with zinc alloy and equipped with USB 3.1 Gen1 Type-A and Lighting connectors, AH790 is the.... See More
 
Apacer AH790 Lightning Swivel USB Flash Drive for iPhone/iPad Expanding more External Memory in Your Apple Devices
Techworld Date Posted: 3:23 PM | 99 Views
Apacer, a mobile storage solution expert, introduces AH790 dual interface swivel flash drive for iOS devices. Aesthetically built with zinc alloy and equipped with USB 3.1 Gen1 Type-A and Lighting connectors, AH790 is the...See More

 
Chinese-Speaking APT Actor Caught Spying on Pharmaceutical Organizations
Techworld Date Posted: 15 March 2018 11:36 AM | 808 Views
Kaspersky Lab’s researchers have discovered evidence of an emerging and alarming trend: more and more advanced cyber threat actors are turning their attention to attacks against the healthcare sector. The infamous PlugX malware has.... See More
 
Chinese-Speaking APT Actor Caught Spying on Pharmaceutical Organizations
Techworld Date Posted: 11:36 AM | 808 Views
Kaspersky Lab’s researchers have discovered evidence of an emerging and alarming trend: more and more advanced cyber threat actors are turning their attention to attacks against the healthcare sector. The infamous PlugX malware has...See More

 
Must-Have Christmas Bundles on Your Shopping List
Techworld Date Posted: 14 December 2018 4:45 PM | 224 Views
Everyone’s favourite holiday is a few carols away. To help everyone check off items on their holiday shopping lists, HMD Global, the home of Nokia phones, offers timely and reliable gift ideas that will.... See More
 
Must-Have Christmas Bundles on Your Shopping List
Techworld Date Posted: 4:45 PM | 224 Views
Everyone’s favourite holiday is a few carols away. To help everyone check off items on their holiday shopping lists, HMD Global, the home of Nokia phones, offers timely and reliable gift ideas that will...See More


Power by

Download Free AZ | Free Wordpress Themes