<br /> Digital<br /> The Quarterly Magazine for Digital Forensics Practitioners Issue 30 · February 2017<br /> WIN! an iPod Nano<br /> ForensicS<br /> / magazine<br /> UDP-BASED<br /> AMPLIFICATION<br /> ATTACKS<br /> Latest News, 360<br /> Book Reviews, IRQ<br /> & much more inside!<br /> PLUS!<br /> Windows Anti-Forensics<br /> Cloud Technology Vulnerabilities<br /> Vehicles Solve Crime<br /> Mathematica<br /> 30<br /> 9 772042 061004<br /> Issue 30 / £14.99 TR Media<br /> <br /> EDITORIAL<br /> W<br /> ow! Issue 30, it may seem like just a number<br /> to many, however top those of here at Digital<br /> Forensics Magazine it represents a significant<br /> mile<a title="DFM30 - Online page 1" href="http://viewer.zmags.com/publication/d071f278?page=1"> Digital The Quarterly Magazine for Digital Fore</a> <a title="DFM30 - Online page 2" href="http://viewer.zmags.com/publication/d071f278?page=2"> </a> <a title="DFM30 - Online page 3" href="http://viewer.zmags.com/publication/d071f278?page=3"> EDITORIAL W </a> <a title="DFM30 - Online page 4" href="http://viewer.zmags.com/publication/d071f278?page=4"> </a> <a title="DFM30 - Online page 5" href="http://viewer.zmags.com/publication/d071f278?page=5"> 68 FEATURES 08 / Cloud Technology Vulnerabilitie</a> <a title="DFM30 - Online page 6" href="http://viewer.zmags.com/publication/d071f278?page=6"> / NEWS NEWS NEWS / How Artificial Intelligence</a> <a title="DFM30 - Online page 7" href="http://viewer.zmags.com/publication/d071f278?page=7"> / NEWS ROUND-UP ONLINE DATING FRAUD VICTIM NUMBER</a> <a title="DFM30 - Online page 8" href="http://viewer.zmags.com/publication/d071f278?page=8"> / LEAD FEATURE CLOUD TECHNOLOGY VULNER</a> <a title="DFM30 - Online page 9" href="http://viewer.zmags.com/publication/d071f278?page=9"> like a small operating system with hundreds of th</a> <a title="DFM30 - Online page 10" href="http://viewer.zmags.com/publication/d071f278?page=10"> / LEAD FEATURE / Attack Vectors The virtualizat</a> <a title="DFM30 - Online page 11" href="http://viewer.zmags.com/publication/d071f278?page=11"> / Top Fact Virtualization is the technology that </a> <a title="DFM30 - Online page 12" href="http://viewer.zmags.com/publication/d071f278?page=12"> / LEAD FEATURE / See Also Pearce, M., Zeadally,</a> <a title="DFM30 - Online page 13" href="http://viewer.zmags.com/publication/d071f278?page=13"> </a> <a title="DFM30 - Online page 14" href="http://viewer.zmags.com/publication/d071f278?page=14"> / FEATURE UDP-BASED AMPLIFICATION ATTACKS Desm</a> <a title="DFM30 - Online page 15" href="http://viewer.zmags.com/publication/d071f278?page=15"> / Anti-Virus Won't Protect You! It's important to</a> <a title="DFM30 - Online page 16" href="http://viewer.zmags.com/publication/d071f278?page=16"> / FEATURE Given some of that information,</a> <a title="DFM30 - Online page 17" href="http://viewer.zmags.com/publication/d071f278?page=17"> back to the Request. All devices ping/send a resp</a> <a title="DFM30 - Online page 18" href="http://viewer.zmags.com/publication/d071f278?page=18"> / FEATURE In Figure 1 we have the attacke</a> <a title="DFM30 - Online page 19" href="http://viewer.zmags.com/publication/d071f278?page=19"> </a> <a title="DFM30 - Online page 20" href="http://viewer.zmags.com/publication/d071f278?page=20"> </a> <a title="DFM30 - Online page 21" href="http://viewer.zmags.com/publication/d071f278?page=21"> / LEGAL EDITORIAL LEGAL EDITORIAL Alleged Russian</a> <a title="DFM30 - Online page 22" href="http://viewer.zmags.com/publication/d071f278?page=22"> / LEGAL FEATURE CHINA'S NEW CYBERSECURITY LAW </a> <a title="DFM30 - Online page 23" href="http://viewer.zmags.com/publication/d071f278?page=23"> POINTING ONE'S BROWSER AT A URL ON SOMEONE</a> <a title="DFM30 - Online page 24" href="http://viewer.zmags.com/publication/d071f278?page=24"> / LEGAL FEATURE IN MANY PLACES AROUND TH</a> <a title="DFM30 - Online page 25" href="http://viewer.zmags.com/publication/d071f278?page=25"> Actions against decency: respect social moral</a> <a title="DFM30 - Online page 26" href="http://viewer.zmags.com/publication/d071f278?page=26"> / LEGAL EDITORIAL LEGAL NEWS A round-up of the la</a> <a title="DFM30 - Online page 27" href="http://viewer.zmags.com/publication/d071f278?page=27"> </a> <a title="DFM30 - Online page 28" href="http://viewer.zmags.com/publication/d071f278?page=28"> / FROM THE LAB WINDOWS ANTI-FORENSICS Niha</a> <a title="DFM30 - Online page 29" href="http://viewer.zmags.com/publication/d071f278?page=29"> The second stream is the ADS. A file can have</a> <a title="DFM30 - Online page 30" href="http://viewer.zmags.com/publication/d071f278?page=30"> / FROM THE LAB The Type command is used</a> <a title="DFM30 - Online page 31" href="http://viewer.zmags.com/publication/d071f278?page=31"> In order to create our Stealth ADS file, we wi</a> <a title="DFM30 - Online page 32" href="http://viewer.zmags.com/publication/d071f278?page=32"> / FROM THE LAB Figure 1</a> <a title="DFM30 - Online page 33" href="http://viewer.zmags.com/publication/d071f278?page=33"> </a> <a title="DFM30 - Online page 34" href="http://viewer.zmags.com/publication/d071f278?page=34"> / FEATURE VEHICLES SOLVE CRIME Joel Bollö and</a> <a title="DFM30 - Online page 35" href="http://viewer.zmags.com/publication/d071f278?page=35"> the Hideway Bar and according to the infotainment</a> <a title="DFM30 - Online page 36" href="http://viewer.zmags.com/publication/d071f278?page=36"> / FEATURE system for weeks, months or even ye</a> <a title="DFM30 - Online page 37" href="http://viewer.zmags.com/publication/d071f278?page=37"> Our missions are aligned and we are committed to </a> <a title="DFM30 - Online page 38" href="http://viewer.zmags.com/publication/d071f278?page=38"> / 360 36 Letters, emails, tweets, connections and</a> <a title="DFM30 - Online page 39" href="http://viewer.zmags.com/publication/d071f278?page=39"> / TWITTER We are regularly tweeting tools, tips a</a> <a title="DFM30 - Online page 40" href="http://viewer.zmags.com/publication/d071f278?page=40"> / ADVERTORIAL CYBER SECURITY, ACADEMIA AND INDUST</a> <a title="DFM30 - Online page 41" href="http://viewer.zmags.com/publication/d071f278?page=41"> 41</a> <a title="DFM30 - Online page 42" href="http://viewer.zmags.com/publication/d071f278?page=42"> / FEATURE FORENSICS EUROPE EXPO Forensics Eu</a> <a title="DFM30 - Online page 43" href="http://viewer.zmags.com/publication/d071f278?page=43"> Day one will be dedicated to the changing dig</a> <a title="DFM30 - Online page 44" href="http://viewer.zmags.com/publication/d071f278?page=44"> / FEATURE NETWORK PERMISSIONS Jim Scarazzo hel</a> <a title="DFM30 - Online page 45" href="http://viewer.zmags.com/publication/d071f278?page=45"> resources. By using groups, a network administrat</a> <a title="DFM30 - Online page 46" href="http://viewer.zmags.com/publication/d071f278?page=46"> / FEATURE With group nesting in mind, it </a> <a title="DFM30 - Online page 47" href="http://viewer.zmags.com/publication/d071f278?page=47"> / EXPERT TIP While there are a number of offering</a> <a title="DFM30 - Online page 48" href="http://viewer.zmags.com/publication/d071f278?page=48"> / FEATURE / Scripts And Command Line Directiv</a> <a title="DFM30 - Online page 49" href="http://viewer.zmags.com/publication/d071f278?page=49"> </a> <a title="DFM30 - Online page 50" href="http://viewer.zmags.com/publication/d071f278?page=50"> / FEATURE HOW MACHINE LEARNING IS </a> <a title="DFM30 - Online page 51" href="http://viewer.zmags.com/publication/d071f278?page=51"> WHEN SOME PEOPLE THINK OF THE INSIDER THRE</a> <a title="DFM30 - Online page 52" href="http://viewer.zmags.com/publication/d071f278?page=52"> / FEATURE “usual” activities and flag any beha</a> <a title="DFM30 - Online page 53" href="http://viewer.zmags.com/publication/d071f278?page=53"> / Proactivity Is Key Machine learning is great be</a> <a title="DFM30 - Online page 54" href="http://viewer.zmags.com/publication/d071f278?page=54"> / COMPETITION COMPETITION / This issue we have</a> <a title="DFM30 - Online page 55" href="http://viewer.zmags.com/publication/d071f278?page=55"> </a> <a title="DFM30 - Online page 56" href="http://viewer.zmags.com/publication/d071f278?page=56"> / FEATURE CONTENT IDENTIFICATION AND CLASSIFIC</a> <a title="DFM30 - Online page 57" href="http://viewer.zmags.com/publication/d071f278?page=57"> if accuracy has improved and whether advanced ICI</a> <a title="DFM30 - Online page 58" href="http://viewer.zmags.com/publication/d071f278?page=58"> / FEATURE various parameters can be used to b</a> <a title="DFM30 - Online page 59" href="http://viewer.zmags.com/publication/d071f278?page=59"> / Concept IV – Contrast Enhancement and Whi</a> <a title="DFM30 - Online page 60" href="http://viewer.zmags.com/publication/d071f278?page=60"> / FEATURE If[(imagewidth >= 4000) && (imagehei</a> <a title="DFM30 - Online page 61" href="http://viewer.zmags.com/publication/d071f278?page=61"> a cityscape identified as “oil refinery.” Looking a</a> <a title="DFM30 - Online page 62" href="http://viewer.zmags.com/publication/d071f278?page=62"> / FEATURE The problem with Classify[] is </a> <a title="DFM30 - Online page 63" href="http://viewer.zmags.com/publication/d071f278?page=63"> Figure 4. Example Classifier Information between </a> <a title="DFM30 - Online page 64" href="http://viewer.zmags.com/publication/d071f278?page=64"> / FEATURE (* 8. Determine information about C</a> <a title="DFM30 - Online page 65" href="http://viewer.zmags.com/publication/d071f278?page=65"> / Clear Memory From UNUsed Variables Depending on</a> <a title="DFM30 - Online page 66" href="http://viewer.zmags.com/publication/d071f278?page=66"> / GET INVOLVED GET INVOLVED Calling all Book Revi</a> <a title="DFM30 - Online page 67" href="http://viewer.zmags.com/publication/d071f278?page=67"> </a> <a title="DFM30 - Online page 68" href="http://viewer.zmags.com/publication/d071f278?page=68"> / FEATURE CONNECTED VEHICLES Shane Owens puts</a> <a title="DFM30 - Online page 69" href="http://viewer.zmags.com/publication/d071f278?page=69"> / What is a Connected Car? For the purpose of thi</a> <a title="DFM30 - Online page 70" href="http://viewer.zmags.com/publication/d071f278?page=70"> / FEATURE There are other aspects of conn</a> <a title="DFM30 - Online page 71" href="http://viewer.zmags.com/publication/d071f278?page=71"> sized hackers paradise, leaving access open to th</a> <a title="DFM30 - Online page 72" href="http://viewer.zmags.com/publication/d071f278?page=72"> </a> <a title="DFM30 - Online page 73" href="http://viewer.zmags.com/publication/d071f278?page=73"> / COMING SOON COMING SOON… A round-up of featu</a> <a title="DFM30 - Online page 74" href="http://viewer.zmags.com/publication/d071f278?page=74"> 9 772042 061004 </a> <a title="DFM30 - Online page 75" href="http://viewer.zmags.com/publication/d071f278?page=75"> / book reviews BOOK REVIEWS THE BASICS OF DIGITAL</a> <a title="DFM30 - Online page 76" href="http://viewer.zmags.com/publication/d071f278?page=76"> / book reviews T </a> <a title="DFM30 - Online page 77" href="http://viewer.zmags.com/publication/d071f278?page=77"> </a> <a title="DFM30 - Online page 78" href="http://viewer.zmags.com/publication/d071f278?page=78"> / IRQ IRQ Streamlined Failed Reporting. F </a> <a title="DFM30 - Online page 79" href="http://viewer.zmags.com/publication/d071f278?page=79"> </a> <a title="DFM30 - Online page 80" href="http://viewer.zmags.com/publication/d071f278?page=80"> </a>