3 ms·
something like this is trivial to implement via a canary token. E.g.: a folder on the Desktop that is named "Juicy-Files" (or something similar) which when open
by DyslexicAtheist 3y ago
something like this is trivial to implement via a canary token. E.g.: a folder on the Desktop that is named "Juicy-Files" (or something similar) which when opened performs an action (e.g. an alert out of bad, or even deletion of actual secrets in some other location).
- alwa 3y agoWouldn’t ordinary forensic practice involve operating on an image of the device rather than the device itself?
- DyslexicAtheist 3y agothe comment I was replying to talked about a kill-switch or some kind of method to respond to an intrusion. agree that this would not be useful to defend against forensics on a cold image/drive.