Concealment Techniques 䡲 69
A.M. You discuss various anti-forensic tactics in your presentations … beyond the
technical aspects … could you discuss one of these?
V.L. e technological aspect of anti-forensics is only one approach to prevent an
eff ective analysis from being performed. Attacking weaknesses in analyst
mentality and training is another very eff ective means of non-conventional
anti-forensics. First, it is important to understand the mentality taken by 99
percent of investigators.
e best quote I have ever heard that truly captures this was provided by
an audience member at ToorCon 7 in San Diego. e individual commenting
was a very well respected forensics expert, and he stated that forensics is “a lot
like looking for ...