Update for 12-01-22 00:30
This commit is contained in:
parent
ccbf644321
commit
d4e4b26b3b
@ -46,3 +46,24 @@ This is the CIA list of dos and donts.
|
|||||||
* DO document disk forensic footprint that could created by tool
|
* DO document disk forensic footprint that could created by tool
|
||||||
* DONOT read, write, or cache data to disk for no reason
|
* DONOT read, write, or cache data to disk for no reason
|
||||||
* DONOT write plain text collected data to the disk
|
* DONOT write plain text collected data to the disk
|
||||||
|
* DO encrypt all data written to disk
|
||||||
|
* DO utilize a secure erase when removing a files from disk that also wipes
|
||||||
|
filename, datetime stamp, and contents
|
||||||
|
* DO perfom at least a single pass of zeros over the content of the file
|
||||||
|
* DONOT perform disk IO operations that will make the system unresponsive
|
||||||
|
* DONOT use a magic header or footer
|
||||||
|
* DONOT use hard-coded filenames or filepaths. These must be configurable at
|
||||||
|
deployment time by the operator
|
||||||
|
* DO have a configurable max size limit or output file count for writing files
|
||||||
|
|
||||||
|
== Dates/Time ==
|
||||||
|
|
||||||
|
* DO use GMT/UTC/Zulu
|
||||||
|
* DONOT use US-centeric timestamps
|
||||||
|
* DO use YYYYMMDD instead
|
||||||
|
|
||||||
|
== PSP/AV ==
|
||||||
|
|
||||||
|
* DONOT assume free versions of PSP is the same as retail PSP. Test on all
|
||||||
|
versions in a sandbox
|
||||||
|
* DO test PSPs with recently live internet connections when possible
|
||||||
|
@ -6,7 +6,7 @@ Tools useful for security, either offensive or defensive
|
|||||||
|
|
||||||
Hiding information
|
Hiding information
|
||||||
|
|
||||||
[[cia-do-dont]]
|
* [[cia-do-dont]]
|
||||||
|
|
||||||
=== Ciphers ===
|
=== Ciphers ===
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user