System and method for providing remote forensics capability

Details System and method for providing remote forensics capability System and method for providing remote forensics capability

2011-03-01

2011-03-01

Hamza, Faruk (Department: 2442)

Electrical computers and digital processing systems: multicomput

Remote data accessing

C709S218000, C709S228000

Reexamination Certificate

active

07899882

ABSTRACT:
A system and method for performing a forensic analysis of a subject computer having a non-volatile memory with a second computer is provided. In one embodiment, the method includes executing on the subject computer a first code segment configured to provide communications via a non-proprietary communication protocol such as the Internet Small Computer System Interface (iSCSI) protocol; establishing a connection between the second computer and the subject computer via the non-proprietary communication protocol. The non-proprietary communication protocol includes one or more write operations for writing data to a non-volatile memory in response to one or more write commands and the first code segment is configured to not write data to the non-volatile memory of the subject computer in response to receipt of the one or more write commands. The method may include performing a first forensic analysis of the subject computer via the connection. In addition, the method may further comprise establishing a secure connection, such via the Internet, between the second computer and a remote computer, wherein performing the first forensic analysis is initiated by the remote computer. A pre-defined forensic instruction set may be stored on the second computer and executed to perform the first forensic analysis.

REFERENCES:
patent: 6345283 (2002-02-01), Anderson
patent: 6701456 (2004-03-01), Biessener
patent: 6792545 (2004-09-01), McCreight et al.
patent: 7016951 (2006-03-01), Longworth et al.
patent: 7194619 (2007-03-01), Abbondanzio et al.
patent: 7640323 (2009-12-01), Sun
patent: 2002/0129264 (2002-09-01), Rowland et al.
patent: 2002/0162017 (2002-10-01), Sorkin et al.
patent: 2003/0208689 (2003-11-01), Garza
patent: 2003/0236993 (2003-12-01), McCreight et al.
patent: 2004/0177032 (2004-09-01), Bradley et al.
patent: 2004/0260733 (2004-12-01), Adelstein et al.
patent: 2005/0044244 (2005-02-01), Warwick et al.
patent: 2005/0166082 (2005-07-01), Williams et al.
patent: 2005/0216668 (2005-09-01), Kobayashi et al.
patent: 2007/0168455 (2007-07-01), Sun

Affiliated with

Also associated with

Rating

System and method for providing remote forensics capability does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with System and method for providing remote forensics capability, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for providing remote forensics capability will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2725718