مدونة عرب تك

Showing posts with label forensics. Show all posts

الحلقة 1002: كيف يمكن للشرطة ان تستخرج جميع نشاطاتك على الحاسوب حتى وإن حذفت وجرب بنفسك!

23 February 2015 (0)

في هذه الحلقة ، سأريك كيف يمكن للشرطة ان تعثر على جميع نشاطاتك التي قمت بها اثناء إستعمالك للحاسوب وذلك إنطلاقا من تحليل القرص الصلب . بل اكثر من ذلك فيمكن العثور على هذه النشاطات حتى في حا…

window['__wavt'] = 'AOuZoY5U5f5DYIwZwMwabg4pb7tpiWmAJg:1715146997761';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d6414514982918634796','//3arbteech.blogspot.com/search/label/forensics?hl\x3den','6414514982918634796'); _WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '6414514982918634796', 'title': '\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643', 'url': 'http://3arbteech.blogspot.com/search/label/forensics?hl\x3den', 'canonicalUrl': 'http://3arbteech.blogspot.com/search/label/forensics', 'homepageUrl': 'http://3arbteech.blogspot.com/?hl\x3den', 'searchUrl': 'http://3arbteech.blogspot.com/search', 'canonicalHomepageUrl': 'http://3arbteech.blogspot.com/', 'blogspotFaviconUrl': 'http://3arbteech.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643 - Atom\x22 href\x3d\x22http://3arbteech.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643 - RSS\x22 href\x3d\x22http://3arbteech.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643 - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/6414514982918634796/posts/default\x22 /\x3e\n', 'meTag': '\x3clink rel\x3d\x22me\x22 href\x3d\x22https://www.blogger.com/profile/12956062640701785037\x22 /\x3e\n', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/a26ecadc30bb77e6', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'index', 'searchLabel': 'forensics', 'pageName': 'forensics', 'pageTitle': '\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643: forensics'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': '\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643', 'description': '\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643 \u0645\u062f\u0648\u0646\u0629 \u0639\u0644\u0645\u064a\u0629 \u062b\u0642\u0627\u0641\u064a\u0629 \u0627\u062e\u0628\u0627\u0631\u064a\u0643 \u0627\u0633\u0644\u0627\u0645\u064a\u0629 \u062a\u0647\u062a\u0645 \u0628\u0643\u0644 \u0645\u0627 \u064a\u0647\u0645\u0643 \u0641\u064a \u0639\u062f\u0629 \u0645\u062c\u0627\u0644\u0627\u062a \u0645\u062e\u062a\u0644\u0641\u0629 \u0645\u062b\u0644 \u0635\u062d\u062a\u0643 \u062a\u0631\u0628\u064a\u0629 \u062f\u064a\u0646 \u0627\u0644\u0639\u0627\u0628 \u062a\u0643\u0646\u0648\u0644\u0648\u062c\u0627 \u0627\u0646\u062a\u0631\u0646\u062a \u0627\u062e\u0628\u0627\u0631 \u0648\u0627\u0633\u0644\u0627\u0645\u064a\u0627\u062a ', 'url': 'http://3arbteech.blogspot.com/search/label/forensics?hl\x3den', 'type': 'feed', 'isSingleItem': false, 'isMultipleItems': true, 'isError': false, 'isPage': false, 'isPost': false, 'isHomepage': false, 'isArchive': false, 'isSearch': true, 'isLabelSearch': true, 'search': {'label': 'forensics', 'resultsMessage': 'Showing posts with the label forensics', 'resultsMessageHtml': 'Showing posts with the label \x3cspan class\x3d\x27search-label\x27\x3eforensics\x3c/span\x3e'}}}, {'name': 'widgets', 'data': [{'title': 'BlogArchive', 'type': 'BlogArchive', 'sectionId': 'TemplateInsert', 'id': 'BlogArchive300'}, {'title': 'BlogLabels', 'type': 'Label', 'sectionId': 'TemplateInsert', 'id': 'Label300'}, {'title': '\u0625\u0639\u062f\u0627\u062f\u0627\u062a \u0627\u0644\u0642\u0627\u0644\u0628', 'type': 'LinkList', 'sectionId': 'TemplateInsert', 'id': 'LinkList300'}, {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'type': 'PageList', 'sectionId': 'pages', 'id': 'PageList301'}, {'title': '\u0645\u0631\u0628\u0639 \u0627\u0644\u0628\u062d\u062b', 'type': 'HTML', 'sectionId': 'pages', 'id': 'HTML301'}, {'title': '\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643 (Header)', 'type': 'Header', 'sectionId': 'head-container', 'id': 'Header1'}, {'title': '\u0625\u0639\u0644\u0627\u0646 \u0628\u062c\u0648\u0627\u0631 \u0627\u0644\u0644\u0648\u062c\u0648', 'type': 'HTML', 'sectionId': 'head-container', 'id': 'HTML302'}, {'title': '\u0627\u0644\u0642\u0627\u0626\u0645\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629', 'type': 'LinkList', 'sectionId': 'menu-bar', 'id': 'LinkList302'}, {'title': '\u0625\u0639\u0644\u0627\u0646 \u0635\u0641\u062d\u0627\u062a \u0627\u0644\u062a\u0633\u0645\u064a\u0627\u062a \u0648\u0627\u0644\u0623\u0631\u0634\u064a\u0641 \u0648\u0627\u0644\u0628\u062d\u062b', 'type': 'HTML', 'sectionId': 'RecentPosts', 'id': 'HTML305'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'RecentPosts', 'id': 'Blog1', 'posts': [{'id': '2715564229764625453', 'title': '\u0627\u0644\u062d\u0644\u0642\u0629 1002: \u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0644\u0644\u0634\u0631\u0637\u0629 \u0627\u0646 \u062a\u0633\u062a\u062e\u0631\u062c \u062c\u0645\u064a\u0639 \u0646\u0634\u0627\u0637\u0627\u062a\u0643 \u0639\u0644\u0649 \u0627\u0644\u062d\u0627\u0633\u0648\u0628 \u062d\u062a\u0649 \u0648\u0625\u0646 \u062d\u0630\u0641\u062a \u0648\u062c\u0631\u0628 \u0628\u0646\u0641\u0633\u0643!', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4bFCQlywVeoXCgQl9CbCQ6Z-POGHU8sj0Ie1bWn2MZ4At0OXzas1JQyuD23eZCsKPjOX0L48c8pBA8JeT9z3InX8LejswEGL8JHO7fgIOHMUr9ITz0HzigxA4E4MwkqD1_m8iX1pPZHs/s1600/HDD+forensics+amine+raghib.png', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'author', 'label': '\u0628\u0648\u0627\u0633\u0637\u0629'}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}, {'name': 'share', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}], 'allBylineItems': [{'name': 'author', 'label': '\u0628\u0648\u0627\u0633\u0637\u0629'}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}, {'name': 'share', 'label': ''}, {'name': 'labels', 'label': ''}]}, {'title': 'Contact Form', 'type': 'ContactForm', 'sectionId': 'RecentPosts', 'id': 'ContactForm302'}, {'title': '\u0625\u0639\u0644\u0627\u0646\u0627\u062a \u0627\u0644\u0645\u0634\u0627\u0631\u0643\u0627\u062a', 'type': 'LinkList', 'sectionId': 'RecentPosts', 'id': 'LinkList500'}, {'title': '\u0627\u0644\u0634\u0627\u0626\u0639', 'type': 'PopularPosts', 'sectionId': 'sidebar-section', 'id': 'PopularPosts1', 'posts': [{'title': '\u0628\u0627\u0642\u0629 \u0645\u0646 \u0623\u0641\u0636\u0644 \u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0648\u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0639\u0644\u0649 \u0634\u0628\u0643\u0629 \u0627\u0644\u0627\u0646\u062a\u0631\u0646\u062a\u060c\u0625\u0643\u062a\u0634\u0641\u0647\u0627 \u0628\u0646\u0641\u0633\u0643 ! (\u0623\u0643\u062b\u0631 \u0645\u0646 90 \u0645\u0648\u0642\u0639 )', 'id': 8773212579902581847}, {'title': '\u0646\u0633\u0631\u064a\u0646 \u0637\u0627\u0641\u0634 \u062a\u0633\u062a\u0639\u0631\u0636 \u0623\u0646\u0648\u062b\u062a\u0647\u0627 \u0639\u0644\u0649 \u0627\u0644\u0628\u062d\u0631 ', 'id': 2371565073726123190}, {'title': '\u0628\u0627\u0644\u0635\u0648\u0631 \u0639\u0645\u0644 \u0645\u0633\u0627\u062c \u0627\u0644\u0623\u0637\u0641\u0627\u0644 \u0644\u0644\u062a\u062e\u0644\u0635 \u0645\u0646 \u0627\u0644\u063a\u0627\u0632\u0627\u062a', 'id': 6942892176372812151}]}, {'title': 'Labels', 'type': 'Label', 'sectionId': 'sidebar-section', 'id': 'Label1'}, {'title': '\u0645\u062f\u0648\u0646\u0629 \u0639\u0631\u0628 \u062a\u0643', 'type': 'HTML', 'sectionId': 'col-1', 'id': 'HTML1'}, {'title': 'Contact Form', 'type': 'ContactForm', 'sectionId': 'col-2', 'id': 'ContactForm1'}, {'title': '\u0645\u0634\u0627\u0631\u0643\u0629 \u0645\u0645\u064a\u0632\u0629', 'type': 'FeaturedPost', 'sectionId': 'col-3', 'id': 'FeaturedPost1', 'postId': '6066583852088276635'}, {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'type': 'PageList', 'sectionId': 'col-4', 'id': 'PageList1'}, {'title': '\u0627\u0644\u062d\u0642\u0648\u0642', 'type': 'HTML', 'sectionId': 'license', 'id': 'HTML306'}]}]); _WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive300', 'TemplateInsert', document.getElementById('BlogArchive300'), {'languageDirection': 'ltr', 'loadingMessage': 'Loading\x26hellip;'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label300', 'TemplateInsert', document.getElementById('Label300'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList300', 'TemplateInsert', document.getElementById('LinkList300'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList301', 'pages', document.getElementById('PageList301'), {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'links': [{'isCurrentPage': false, 'href': 'https://3arbteech.blogspot.com/', 'id': '0', 'title': '\u0627\u0644\u0635\u0641\u062d\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629'}, {'isCurrentPage': false, 'href': 'http://3arbteech.blogspot.com/p/archive.html?hl\x3den', 'id': '2172783489941074685', 'title': '\u0623\u0631\u0634\u064a\u0641 \u0627\u0644\u0645\u062f\u0648\u0646\u0629'}, {'isCurrentPage': false, 'href': 'http://3arbteech.blogspot.com/p/privacy-policy.html?hl\x3den', 'id': '3922847309231442222', 'title': '\u0633\u064a\u0627\u0633\u0629 \u0627\u0644\u062e\u0635\u0648\u0635\u0628\u0629'}, {'isCurrentPage': false, 'href': 'http://3arbteech.blogspot.com/p/contact.html?hl\x3den', 'id': '8754957956724987757', 'title': '\u0627\u062a\u0635\u0644 \u0628\u0646\u0627 '}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML301', 'pages', document.getElementById('HTML301'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'head-container', document.getElementById('Header1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML302', 'head-container', document.getElementById('HTML302'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList302', 'menu-bar', document.getElementById('LinkList302'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML305', 'RecentPosts', document.getElementById('HTML305'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'RecentPosts', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'navMessage': 'Showing posts with label \x3cb\x3eforensics\x3c/b\x3e. \x3ca href\x3d\x22http://3arbteech.blogspot.com/\x22\x3eShow all posts\x3c/a\x3e', 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1666805145-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm302', 'RecentPosts', document.getElementById('ContactForm302'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': 'Contact Form', 'blogId': '6414514982918634796', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY6Ve3NEbUOpGbXQHlGh7J8IP4hZYw:1715146997762', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList500', 'RecentPosts', document.getElementById('LinkList500'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'sidebar-section', document.getElementById('PopularPosts1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label1', 'sidebar-section', document.getElementById('Label1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML1', 'col-1', document.getElementById('HTML1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'col-2', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': 'Contact Form', 'blogId': '6414514982918634796', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY6Ve3NEbUOpGbXQHlGh7J8IP4hZYw:1715146997762', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull')); _WidgetManager._RegisterWidget('_FeaturedPostView', new _WidgetInfo('FeaturedPost1', 'col-3', document.getElementById('FeaturedPost1'), {}, 'displayModeFull')); _WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'col-4', document.getElementById('PageList1'), {'title': '\u0627\u0644\u0635\u0641\u062d\u0627\u062a', 'links': [{'isCurrentPage': false, 'href': 'http://3arbteech.blogspot.com/?hl\x3den', 'title': '\u0627\u0644\u0635\u0641\u062d\u0629 \u0627\u0644\u0631\u0626\u064a\u0633\u064a\u0629'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull')); _WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML306', 'license', document.getElementById('HTML306'), {}, 'displayModeFull'));