{"id":759,"date":"2022-01-03T20:03:35","date_gmt":"2022-01-03T20:03:35","guid":{"rendered":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?page_id=759"},"modified":"2022-01-12T20:52:55","modified_gmt":"2022-01-12T20:52:55","slug":"antiforensics","status":"publish","type":"page","link":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/antiforensics\/","title":{"rendered":"Antiforensics"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"759\" class=\"elementor elementor-759\" data-elementor-settings=\"[]\">\n\t\t\t\t\t\t\t<div class=\"elementor-section-wrap\">\n\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e0d0544 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e0d0544\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f591cbc\" data-id=\"f591cbc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0359e77 elementor-widget elementor-widget-heading\" data-id=\"0359e77\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">Antiforensics<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3d95e6d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3d95e6d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-9b35217\" data-id=\"9b35217\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7c6a47a elementor-widget elementor-widget-heading\" data-id=\"7c6a47a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Definition und Begriff<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3c1ecf2 elementor-widget elementor-widget-heading\" data-id=\"3c1ecf2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">Definition von Antiforensik<\/h5>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26b7841 elementor-widget elementor-widget-text-editor\" data-id=\"26b7841\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Hier wird ein sehr weiter Ansatz verwendet, der sich an den Begriff OPSEC anlehnt, wie er in der Hackerszene<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_1');\" onkeypress=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_1');\" ><sup id=\"footnote_plugin_tooltip_1445_1_1\" class=\"footnote_plugin_tooltip_text\">1<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1445_1_1\" class=\"footnote_tooltip\">Der Begriff Hacker resp. Hackerszene wird wertungsfrei verwendet. Hacking ist nicht per se strafbar oder kriminell.<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1445_1_1').tooltip({ tip: '#footnote_plugin_tooltip_text_1445_1_1', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script> verwendet wird:<\/p>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-edf0764 elementor-widget elementor-widget-text-editor\" data-id=\"edf0764\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Antiforenisk ist jegliche Massnahme, die dazu dient, die eigene Identit\u00e4t und Vorgehensweise zu verschleiern.<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_2');\" onkeypress=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_2');\" ><sup id=\"footnote_plugin_tooltip_1445_1_2\" class=\"footnote_plugin_tooltip_text\">2<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1445_1_2\" class=\"footnote_tooltip\">Unter Massnahme fallen bereits gew\u00f6hnliche resp. allt\u00e4gliche Verhaltensweisen, die zum Profilen dienen k\u00f6nnen. Vgl. <span class=\"autor-continuous-text\">Grugq<\/span>, Kap. 2; Vgl.<span class=\"autor-continuous-text\">Heinson<\/span>, S. 68 ff.<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1445_1_2').tooltip({ tip: '#footnote_plugin_tooltip_text_1445_1_2', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7501c25 elementor-widget elementor-widget-text-editor\" data-id=\"7501c25\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Synonym benutzte Begriffe: Operations Security (OPSEC<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_3');\" onkeypress=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_3');\" ><sup id=\"footnote_plugin_tooltip_1445_1_3\" class=\"footnote_plugin_tooltip_text\">3<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1445_1_3\" class=\"footnote_tooltip\">In einem breiten Sinne und im Kontext der Hackerszene verstanden. Im Unterschied zu einer reinen Betrachtung aus Sicht der IT-Sicherheit ist unter OPSEC im Kontext der Hackerszene eine&nbsp;&#x2026; <span class=\"footnote_tooltip_continue\"  onclick=\"footnote_moveToReference_1445_1('footnote_plugin_reference_1445_1_3');\">Continue reading<\/span><\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1445_1_3').tooltip({ tip: '#footnote_plugin_tooltip_text_1445_1_3', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script>)<\/p>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ca41b84\" data-id=\"ca41b84\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c8202a1 elementor-widget elementor-widget-page-title\" data-id=\"c8202a1\" data-element_type=\"widget\" data-widget_type=\"page-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\t\t<div class=\"hfe-page-title hfe-page-title-wrapper elementor-widget-heading\">\n\n\t\t\t\t\t\t\t\t<h6 class=\"elementor-heading-title elementor-size-default\">\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tOverview: \t\t\t\t\tAntiforensics  \n\t\t\t<\/h6 > \n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7cdfb5c elementor-widget elementor-widget-shortcode\" data-id=\"7cdfb5c\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><!-- Beginning of Link Library Output --><div id='linklist1' class='linklist'><!-- Div Linklist -->\n<div class=\"LinkLibraryCat LinkLibraryCat27 level0\"><!-- Div Category --><div id=\"quick-links\"><!-- Div Category Name --><div class=\"linklistcatname\"><!-- Div Cat Name --><span class=\"linklistcatclass\">Quick Links<\/span><\/div><!-- DivOrHeader --><\/div><!-- Div Category Name -->\n\t<ul>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Anti-computer_forensics\" id=\"link-2156\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">Wikipedia &#8220;Antiforensics&#8221;<\/a><\/li>\n\t<\/ul>\n<\/div><!-- Div End Category -->\n<script type='text\/javascript'>\njQuery(document).ready(function()\n{\njQuery('.arrow-up').hide();\njQuery('#linklist1 a.track_this_link').click(function() {\nlinkid = this.id;\nlinkid = linkid.substring(5);\npath = '';\njQuery.ajax( {    type: 'POST',    url: 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-admin\/admin-ajax.php',     data: { action: 'link_library_tracker',             _ajax_nonce: 'e1ebdf9706',             id:linkid, xpath:path }     });\nreturn true;\n});\njQuery('#linklist1 .expandlinks').click(function() {\ntarget = '.' + jQuery(this).attr('id');\nsubcattarget = '.' + jQuery(this).attr('data-subcat');\nif ( jQuery( target ).is(':visible') ) {\njQuery(target).slideUp();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/expand-32.png');\n} else {\njQuery(target).slideDown();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/collapse-32.png');\n}\n});\njQuery('#linklist1 .linklistcatclass').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\njQuery('#linklist1 .linklistcatnamedesc').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\n});\n<\/script>\n<\/div><!-- Div Linklist -->\n<!-- End of Link Library Output -->\n\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3bdf616 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3bdf616\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-acba6bb\" data-id=\"acba6bb\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7cead84 elementor-widget elementor-widget-heading\" data-id=\"7cead84\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Techniken von Antiforensics<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ce2f29a elementor-widget elementor-widget-text-editor\" data-id=\"ce2f29a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\tBei forensischen Ermittlungen ist Verschwiegenheit und besonnenes Vorgehen wichtig. Insbesondere bei unternehmensinternen Ermittlungen muss der Kreis der eingeweihten Personen klein gehalten werden. Im Idealfall kommt ein vollst\u00e4ndig externes Team zum Einsatz, das nur mit einer Entscheidungsbefugten Person kommuniziert. Es kann vorkommen, dass das Untersuchungsteam feststellt, dass diese Person selbst involviert ist, worauf die n\u00e4chsth\u00f6here verantwortliche Person beizuziehen ist (Eskalation bspw. an die Gesch\u00e4ftsf\u00fchrung (CEO) oder an das Verwaltungsratspr\u00e4sidium). Die Ermittlungsteams sind im Rahmen Ihrer vertraglichen Verpflichtungen nicht einzelnen Organen verpflichtet, sondern der Unternehmung als jurisitische Person selbst.\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-e06d72f\" data-id=\"e06d72f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-60cd233 elementor-widget elementor-widget-shortcode\" data-id=\"60cd233\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><!-- Beginning of Link Library Output --><div id='linklist1' class='linklist'><!-- Div Linklist -->\n<div class=\"LinkLibraryCat LinkLibraryCat8 level0\"><!-- Div Category --><div id=\"data-sources\"><!-- Div Category Name --><div class=\"linklistcatname\"><!-- Div Cat Name --><span class=\"linklistcatclass\">Data Sources<\/span><\/div><!-- DivOrHeader --><\/div><!-- Div Category Name -->\n\t<ul>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0015\" id=\"link-1410\" class=\"track_this_link \" rel=\"noopener noreferrer\">Application Log (DS0015)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0017\" id=\"link-1415\" class=\"track_this_link \" rel=\"noopener noreferrer\">Command (DS0017)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0038\" id=\"link-1417\" class=\"track_this_link \" rel=\"noopener noreferrer\">Domain Name (DS0038)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0016\" id=\"link-1418\" class=\"track_this_link \" rel=\"noopener noreferrer\">Drive (DS0016)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0022\" id=\"link-1420\" class=\"track_this_link \" rel=\"noopener noreferrer\">File (DS0022)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0018\" id=\"link-1421\" class=\"track_this_link \" rel=\"noopener noreferrer\">Firewall (DS0018)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0007\" id=\"link-1424\" class=\"track_this_link \" rel=\"noopener noreferrer\">Image (DS0007)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0035\" id=\"link-1426\" class=\"track_this_link \" rel=\"noopener noreferrer\">Internet Scan (DS0035)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0028\" id=\"link-1428\" class=\"track_this_link \" rel=\"noopener noreferrer\">Logon Session (DS0028)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0029\" id=\"link-1433\" class=\"track_this_link \" rel=\"noopener noreferrer\">Network Traffic (DS0029)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0009\" id=\"link-1436\" class=\"track_this_link \" rel=\"noopener noreferrer\">Process (DS0009)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0003\" id=\"link-1437\" class=\"track_this_link \" rel=\"noopener noreferrer\">Scheduled Job (DS0003)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0012\" id=\"link-1438\" class=\"track_this_link \" rel=\"noopener noreferrer\">Script (DS0012)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0019\" id=\"link-1440\" class=\"track_this_link \" rel=\"noopener noreferrer\">Service (DS0019)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0002\" id=\"link-1442\" class=\"track_this_link \" rel=\"noopener noreferrer\">User Account (DS0002)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0024\" id=\"link-1445\" class=\"track_this_link \" rel=\"noopener noreferrer\">Windows Registry (DS0024)<\/a><\/li>\n\t<\/ul>\n<\/div><!-- Div End Category -->\n<script type='text\/javascript'>\njQuery(document).ready(function()\n{\njQuery('.arrow-up').hide();\njQuery('#linklist1 a.track_this_link').click(function() {\nlinkid = this.id;\nlinkid = linkid.substring(5);\npath = '';\njQuery.ajax( {    type: 'POST',    url: 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-admin\/admin-ajax.php',     data: { action: 'link_library_tracker',             _ajax_nonce: 'e1ebdf9706',             id:linkid, xpath:path }     });\nreturn true;\n});\njQuery('#linklist1 .expandlinks').click(function() {\ntarget = '.' + jQuery(this).attr('id');\nsubcattarget = '.' + jQuery(this).attr('data-subcat');\nif ( jQuery( target ).is(':visible') ) {\njQuery(target).slideUp();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/expand-32.png');\n} else {\njQuery(target).slideDown();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/collapse-32.png');\n}\n});\njQuery('#linklist1 .linklistcatclass').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\njQuery('#linklist1 .linklistcatnamedesc').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\n});\n<\/script>\n<\/div><!-- Div Linklist -->\n<!-- End of Link Library Output -->\n\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-97857cd elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"97857cd\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-3bd94ed\" data-id=\"3bd94ed\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-592aa87\" data-id=\"592aa87\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-a640420 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"a640420\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-b737815\" data-id=\"b737815\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c3119a7 elementor-widget elementor-widget-shortcode\" data-id=\"c3119a7\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><div class=\"speaker-mute footnotes_reference_container\"> <div class=\"footnote_container_prepare\"><h5><span role=\"button\" tabindex=\"0\" class=\"footnote_reference_container_label pointer\" onclick=\"footnote_expand_collapse_reference_container_1445_1();\">Referenzen<\/span><span role=\"button\" tabindex=\"0\" class=\"footnote_reference_container_collapse_button\" style=\"display: none;\" onclick=\"footnote_expand_collapse_reference_container_1445_1();\">[<a id=\"footnote_reference_container_collapse_button_1445_1\">+<\/a>]<\/span><\/h5><\/div> <div id=\"footnote_references_container_1445_1\" style=\"\"><table class=\"footnotes_table footnote-reference-container\"><caption class=\"accessibility\">Referenzen<\/caption> <tbody> \r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi pointer\"  onclick=\"footnote_moveToAnchor_1445_1('footnote_plugin_tooltip_1445_1_1');\"><a id=\"footnote_plugin_reference_1445_1_1\" class=\"footnote_backlink\"><span class=\"footnote_index_arrow\">&#8593;<\/span>1<\/a><\/th> <td class=\"footnote_plugin_text\">Der Begriff Hacker resp. Hackerszene wird wertungsfrei verwendet. Hacking ist nicht per se strafbar oder kriminell.<\/td><\/tr>\r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi pointer\"  onclick=\"footnote_moveToAnchor_1445_1('footnote_plugin_tooltip_1445_1_2');\"><a id=\"footnote_plugin_reference_1445_1_2\" class=\"footnote_backlink\"><span class=\"footnote_index_arrow\">&#8593;<\/span>2<\/a><\/th> <td class=\"footnote_plugin_text\">Unter Massnahme fallen bereits gew\u00f6hnliche resp. allt\u00e4gliche Verhaltensweisen, die zum Profilen dienen k\u00f6nnen. Vgl. <span class=\"autor-continuous-text\">Grugq<\/span>, Kap. 2; Vgl.<span class=\"autor-continuous-text\">Heinson<\/span>, S. 68 ff.<\/td><\/tr>\r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi pointer\"  onclick=\"footnote_moveToAnchor_1445_1('footnote_plugin_tooltip_1445_1_3');\"><a id=\"footnote_plugin_reference_1445_1_3\" class=\"footnote_backlink\"><span class=\"footnote_index_arrow\">&#8593;<\/span>3<\/a><\/th> <td class=\"footnote_plugin_text\">In einem breiten Sinne und im Kontext der Hackerszene verstanden. Im Unterschied zu einer reinen Betrachtung aus Sicht der IT-Sicherheit ist unter OPSEC im Kontext der Hackerszene eine Verhaltensweise gemeint, die das eigene Profil resp. den eigenen Fussabdruck im Rahmen von Angriffen m\u00f6glichst klein h\u00e4lt, um die Identifikation und R\u00fcckverfolgung zu vermeiden. Siehe auch <a href=\"https:\/\/en.wikipedia.org\/wiki\/Operations_security\" target=\"_blank\" rel=\"noopener\">OPSEC bei Wikipedia<\/a> <\/td><\/tr>\r\n\r\n <\/tbody> <\/table> <\/div><\/div><script type=\"text\/javascript\"> function footnote_expand_reference_container_1445_1() { jQuery('#footnote_references_container_1445_1').show(); jQuery('#footnote_reference_container_collapse_button_1445_1').text('\u2212'); } function footnote_collapse_reference_container_1445_1() { jQuery('#footnote_references_container_1445_1').hide(); jQuery('#footnote_reference_container_collapse_button_1445_1').text('+'); } function footnote_expand_collapse_reference_container_1445_1() { if (jQuery('#footnote_references_container_1445_1').is(':hidden')) { footnote_expand_reference_container_1445_1(); } else { footnote_collapse_reference_container_1445_1(); } } function footnote_moveToReference_1445_1(p_str_TargetID) { footnote_expand_reference_container_1445_1(); var l_obj_Target = jQuery('#' + p_str_TargetID); if (l_obj_Target.length) { jQuery( 'html, body' ).delay( 0 ); jQuery('html, body').animate({ scrollTop: l_obj_Target.offset().top - window.innerHeight * 0.2 }, 380); } } function footnote_moveToAnchor_1445_1(p_str_TargetID) { footnote_expand_reference_container_1445_1(); var l_obj_Target = jQuery('#' + p_str_TargetID); if (l_obj_Target.length) { jQuery( 'html, body' ).delay( 0 ); jQuery('html, body').animate({ scrollTop: l_obj_Target.offset().top - window.innerHeight * 0.2 }, 380); } }<\/script><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4313caf elementor-widget elementor-widget-heading\" data-id=\"4313caf\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">Weitere Materialien<\/h5><style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-650ad92 elementor-widget elementor-widget-text-editor\" data-id=\"650ad92\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><a href=\"https:\/\/it-forensik.fiw.hs-wismar.de\/index.php\/Anti-Forensik\" target=\"_blank\" rel=\"noopener\">https:\/\/it-forensik.fiw.hs-wismar.de\/index.php\/Anti-Forensik<\/a><\/li><li>Thaddeus T. Grugq, <em>The art of defiling<\/em>, in: Blackhat Briefings, Black Hat Asia 2005 (<a href=\"https:\/\/www.blackhat.com\/presentations\/bh-asia-03\/bh-asia-03-grugq\/bh-asia-03-grugq.pdf\" target=\"_blank\" rel=\"noopener\">Link<\/a>) (Mirror)<\/li><\/ul>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-a7d720d\" data-id=\"a7d720d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Antiforensics Definition und Begriff Aus Wikipedia einarbeiten: https:\/\/en.wikipedia.org\/wiki\/Anti-computer_forensics Rogers verwendet einen eher traditionellen &#8220;Tatort&#8221;-Ansatz, wenn er Anti-Forensik definiert. &#8220;Versuche, das Vorhandensein, die Menge und\/oder die Qualit\u00e4t von Beweisen an einem Tatort negativ zu beeinflussen oder die Analyse und Untersuchung von Beweisen zu erschweren oder unm\u00f6glich zu machen&#8221;[1] Eine der ersten ausf\u00fchrlichen Darstellungen von Anti-Forensik im [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":1000,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":[],"yoast_head":"<title>Antiforensics - forensics.cyber-kill-chain.ch<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Antiforensics - forensics.cyber-kill-chain.ch\" \/>\n<meta property=\"og:description\" content=\"Antiforensics Definition und Begriff Aus Wikipedia einarbeiten: https:\/\/en.wikipedia.org\/wiki\/Anti-computer_forensics Rogers verwendet einen eher traditionellen &#8220;Tatort&#8221;-Ansatz, wenn er Anti-Forensik definiert. &#8220;Versuche, das Vorhandensein, die Menge und\/oder die Qualit\u00e4t von Beweisen an einem Tatort negativ zu beeinflussen oder die Analyse und Untersuchung von Beweisen zu erschweren oder unm\u00f6glich zu machen&#8221;[1] Eine der ersten ausf\u00fchrlichen Darstellungen von Anti-Forensik im [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/\" \/>\n<meta property=\"og:site_name\" content=\"forensics.cyber-kill-chain.ch\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-12T20:52:55+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website\",\"url\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\",\"name\":\"forensics.cyber-kill-chain.ch\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"de-CH\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/#webpage\",\"url\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/\",\"name\":\"Antiforensics - forensics.cyber-kill-chain.ch\",\"isPartOf\":{\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website\"},\"datePublished\":\"2022-01-03T20:03:35+00:00\",\"dateModified\":\"2022-01-12T20:52:55+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/#breadcrumb\"},\"inLanguage\":\"de-CH\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Kill Chain Forensics | LAYER 8\",\"item\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Antiforensics\"}]}]}<\/script>","yoast_head_json":{"title":"Antiforensics - forensics.cyber-kill-chain.ch","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/","og_locale":"de_DE","og_type":"article","og_title":"Antiforensics - forensics.cyber-kill-chain.ch","og_description":"Antiforensics Definition und Begriff Aus Wikipedia einarbeiten: https:\/\/en.wikipedia.org\/wiki\/Anti-computer_forensics Rogers verwendet einen eher traditionellen &#8220;Tatort&#8221;-Ansatz, wenn er Anti-Forensik definiert. &#8220;Versuche, das Vorhandensein, die Menge und\/oder die Qualit\u00e4t von Beweisen an einem Tatort negativ zu beeinflussen oder die Analyse und Untersuchung von Beweisen zu erschweren oder unm\u00f6glich zu machen&#8221;[1] Eine der ersten ausf\u00fchrlichen Darstellungen von Anti-Forensik im [&hellip;]","og_url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/","og_site_name":"forensics.cyber-kill-chain.ch","article_modified_time":"2022-01-12T20:52:55+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website","url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/","name":"forensics.cyber-kill-chain.ch","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"de-CH"},{"@type":"WebPage","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/#webpage","url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/","name":"Antiforensics - forensics.cyber-kill-chain.ch","isPartOf":{"@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website"},"datePublished":"2022-01-03T20:03:35+00:00","dateModified":"2022-01-12T20:52:55+00:00","breadcrumb":{"@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/#breadcrumb"},"inLanguage":"de-CH","potentialAction":[{"@type":"ReadAction","target":["https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains-2\/antiforensics\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/"},{"@type":"ListItem","position":2,"name":"Cyber Kill Chain Forensics | LAYER 8","item":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/"},{"@type":"ListItem","position":3,"name":"Antiforensics"}]}]}},"_links":{"self":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/759"}],"collection":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/comments?post=759"}],"version-history":[{"count":151,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/759\/revisions"}],"predecessor-version":[{"id":2532,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/759\/revisions\/2532"}],"up":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/1000"}],"wp:attachment":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/media?parent=759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}