FAW is the first browser that has been designed to acquire websites for Forensics purposes from any web site on the Internet.
The FAW or Forensics Acquisition of Websites program allows the complete acquisition of a full site resolution or just a part of selecting the user quickly and simply what he wants to use. Having as a tool the scroll bar and the horizontal cursor, it is easy for the user to decide which web page area he wants to analyze.
Additionally, the application can analyze all pages that contain feeds. The software automatically acquires videos or pages with the help of plug in (JavaScript, jQuery, Flash, etc.).
The program is also designed to work with web pages that contain frames, that is, websites that consist of separate sections, independent of each other. The side scroll bars allow you to navigate between different frames to decide what needs to be acquired by the user.
In addition, you can obtain all types of files on the web page, including: images, files, documents, executables and Scripts. The data of all scanned files is placed in the Acquisition.xml folder.
Obtaining the objects linked to the page is configured by the user from the menu Configuration> Linked Objects. It is also important that the HTML code of the web pages can be obtained.
-User with WireShark. Wireshark is a network analyzer protocol, widely used in forensic networks, which has a benchmark of flexibility. Thanks to specific rules for sorting and filtering the researcher can extend and analyze the data quickly. FAW uses Wireshark's capabilities to capture all traffic on all interfaces on active networks. During the acquisition of the website, the researcher can analyze the entire traffic of the network that has been passed to reach the Web page. Completing allows you to have a log file in pcap format.
-Automatically calculate the MD5 and SHA1 fragmentation of all acquired files. The application automatically executes the MD5 hash and the SHA1 calculation for all the obtained files. Hash algorithms, especially SHA1 and MD5, are widely used in IT forensics to validate and digitally sign the acquired data. The recent legislation imposes a guarding chain that allows information technology to be preserved mainly by potential post-takeover changes.
-Verification of integrity of the acquisition. This feature enables you to verify the integrity of your market by using a proprietary algorithm to check if all the files that are recorded are not altered.
It is important to note that 9 versions of the program have come out with 8 / 1 / 2014 which means that the program is constantly updated, it is also a freeware program that anyone can download from the download center of the site. Finally, for anyone interested in downloading this program on the Site page, there are specific steps that make navigating the program very easy!
Paraphrastanitis Konstantinos and Papapaschos Nikos @Wikibook
Download
http://www.fawproject.com/en/download.aspx
Dimitris hates Mondays...
