Cybersecurity

DriveFS Sleuth: Open-source tool for investigating Google Drive File Stream’s disk forensic artifacts – Help Net Security

DriveFS Sleuth automates the investigation of Google Drive File Stream disk artifacts. The tool can parse the disk artifacts and build a filesystem tree-like structure enumerating the synchronized files along with their respective properties. “While engaged in a threat-hunting activity for a client to detect the misuse of file-syncing applications within their network, I identified […]