{"id":264,"date":"2023-08-19T19:02:20","date_gmt":"2023-08-19T19:02:20","guid":{"rendered":"https:\/\/www.anti-forensics.com\/blog\/?p=222"},"modified":"2024-03-08T00:23:41","modified_gmt":"2024-03-08T00:23:41","slug":"sprung-reboot-operating-system-when-a-thumbdrive-is-removed","status":"publish","type":"post","link":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/","title":{"rendered":"sprung &#8211; Reboot Operating System (Linux) When a Thumbdrive is Removed"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><code>sprung<\/code> is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This can be done in many different ways. This is one.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Below we see the results of the command <code>$ udevadm info \/dev\/sdb<\/code>. sprung uses this command to pull serial number information from the device (thumbdrive) plugged into this system. This serial number is what we use to determine if the device is still accessible to the host operating system, or plugged into the computer and host operating system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Furthermore, a check is made to see if the device itself is plugged into the computer by checking for the <code>udevadm<\/code> error output for the string <em>&#8220;No such device&#8221;<\/em> which is part of the error message produced to stderr when no device is found.<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>$ udevadm info \/dev\/sdb\n\n...\nE: ID_SERIAL=Lexar_USB_Flash_Drive_AAZK98GWCSAYYIV9-0:0\nE: ID_SERIAL_SHORT=<strong>AAZK98GWCSAYYIV9<\/strong>\nE: ID_VENDOR=Lexar\n...\n<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>while continue_loop is True:\n    device_info = subprocess.Popen(&#91;'\/usr\/bin\/udevadm', 'info', self.device], stdout=subprocess.PIPE,\n                                   stderr=subprocess.PIPE)\n    if \"No such device\" in device_info.stderr.readline().decode():\n        found = False<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">In the code below, a check is made to determine if the device that was plugged in has the same serial number as the device hardcoded into the script. If it does not match, the loop is exited and the device is rebooted using Magic SysRq Key sequence.<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>for line in device_info.stdout.readlines():\n    line = line.decode()\n\n    device_serial_number = re.search('(?&lt;=ID_USB_SERIAL_SHORT=).*', line)\n\n    if device_serial_number is not None:\n        if device_serial_number.group(0) == self.serial_number:\n            found = True\n            continue_loop = True\n        else:\n            found = False<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Device reboot via Magic SysRq Key.<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>    def panic(self):\n        cmd = 'echo b &gt; \/proc\/sysrq-trigger'\n        subprocess.check_output(cmd, shell=True)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Within the <code>main()<\/code> function, hardcode your devices serial number and device ID. Run as root so that the Magic SysRq Key routine completes.<\/p>\n\n\n\n<pre class=\"wp-block-code has-small-font-size\"><code>def main():\n    device = Device(\"AAZK98GWCSAYYIV9\", \"\/dev\/sdb\")  # &lt;serial number&gt;, &lt;device ID&gt;\n    device.check_device()<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Downloads<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">GitHub: <a href=\"https:\/\/github.com\/ultros\/sprung\">sprung<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>git clone https:\/\/github.com\/ultros\/sprung<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.<\/p>\n","protected":false},"author":1,"featured_media":229,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,24],"tags":[35,38,13],"class_list":["post-264","post","type-post","status-publish","format-standard","has-post-thumbnail","category-anti-forensics-software","category-software-code","tag-github","tag-magic-sysrq-key","tag-python"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>sprung - Reboot Operating System (Linux) When a Thumbdrive is Removed - Anti-Forensics.com<\/title>\n<meta name=\"description\" content=\"sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"sprung - Reboot Operating System (Linux) When a Thumbdrive is Removed - Anti-Forensics.com\" \/>\n<meta property=\"og:description\" content=\"sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/\" \/>\n<meta property=\"og:site_name\" content=\"Anti-Forensics.com\" \/>\n<meta property=\"article:author\" content=\"https:\/\/facebook.com\/stercutis\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-19T19:02:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-08T00:23:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/sprung-anti-forensics-magic-key-linux.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"970\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Max\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Max\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/\"},\"author\":{\"name\":\"Max\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/person\\\/ac3dd160cb42b1409a2a55dea58beec2\"},\"headline\":\"sprung &#8211; Reboot Operating System (Linux) When a Thumbdrive is Removed\",\"datePublished\":\"2023-08-19T19:02:20+00:00\",\"dateModified\":\"2024-03-08T00:23:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/\"},\"wordCount\":248,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/sprung-anti-forensics-magic-key-linux.jpg\",\"keywords\":[\"github\",\"magic sysrq key\",\"python\"],\"articleSection\":[\"Software\",\"Software\\\/Code\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/\",\"name\":\"sprung - Reboot Operating System (Linux) When a Thumbdrive is Removed - Anti-Forensics.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/sprung-anti-forensics-magic-key-linux.jpg\",\"datePublished\":\"2023-08-19T19:02:20+00:00\",\"dateModified\":\"2024-03-08T00:23:41+00:00\",\"description\":\"sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#primaryimage\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/sprung-anti-forensics-magic-key-linux.jpg\",\"contentUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/sprung-anti-forensics-magic-key-linux.jpg\",\"width\":1024,\"height\":970},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"sprung &#8211; Reboot Operating System (Linux) When a Thumbdrive is Removed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/\",\"name\":\"Anti-Forensics.com\",\"description\":\"Rendering Digital Investigations Irrelevant\",\"publisher\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#organization\",\"name\":\"Anti-Forensics.com\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/cropped-anti-forensics.com_.jpg\",\"contentUrl\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/cropped-anti-forensics.com_.jpg\",\"width\":512,\"height\":512,\"caption\":\"Anti-Forensics.com\"},\"image\":{\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/groups\\\/14345620\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/#\\\/schema\\\/person\\\/ac3dd160cb42b1409a2a55dea58beec2\",\"name\":\"Max\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g\",\"caption\":\"Max\"},\"description\":\"Anti-forensics involves attempts to hide data, damage the confidentiality, integrity, and availability of data in an effort to make analysis and examination of this data (evidence) difficult or impossible.\",\"sameAs\":[\"https:\\\/\\\/anti-forensics.com\\\/blog\",\"https:\\\/\\\/facebook.com\\\/stercutis\",\"https:\\\/\\\/linkedin.com\\\/in\\\/jesse-shelley\"],\"url\":\"https:\\\/\\\/anti-forensics.com\\\/blog\\\/author\\\/realjesseshelley_hkwwlra2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"sprung - Reboot Operating System (Linux) When a Thumbdrive is Removed - Anti-Forensics.com","description":"sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/","og_locale":"en_US","og_type":"article","og_title":"sprung - Reboot Operating System (Linux) When a Thumbdrive is Removed - Anti-Forensics.com","og_description":"sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.","og_url":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/","og_site_name":"Anti-Forensics.com","article_author":"https:\/\/facebook.com\/stercutis","article_published_time":"2023-08-19T19:02:20+00:00","article_modified_time":"2024-03-08T00:23:41+00:00","og_image":[{"width":1024,"height":970,"url":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/sprung-anti-forensics-magic-key-linux.jpg","type":"image\/jpeg"}],"author":"Max","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Max","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#article","isPartOf":{"@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/"},"author":{"name":"Max","@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/person\/ac3dd160cb42b1409a2a55dea58beec2"},"headline":"sprung &#8211; Reboot Operating System (Linux) When a Thumbdrive is Removed","datePublished":"2023-08-19T19:02:20+00:00","dateModified":"2024-03-08T00:23:41+00:00","mainEntityOfPage":{"@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/"},"wordCount":248,"commentCount":0,"publisher":{"@id":"https:\/\/anti-forensics.com\/blog\/#organization"},"image":{"@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#primaryimage"},"thumbnailUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/sprung-anti-forensics-magic-key-linux.jpg","keywords":["github","magic sysrq key","python"],"articleSection":["Software","Software\/Code"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/","url":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/","name":"sprung - Reboot Operating System (Linux) When a Thumbdrive is Removed - Anti-Forensics.com","isPartOf":{"@id":"https:\/\/anti-forensics.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#primaryimage"},"image":{"@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#primaryimage"},"thumbnailUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/sprung-anti-forensics-magic-key-linux.jpg","datePublished":"2023-08-19T19:02:20+00:00","dateModified":"2024-03-08T00:23:41+00:00","description":"sprung is a simple script that scans for a device ID and the serial number for a particular device. If the device is removed or malfunctions so that either the device ID or the serial number change or become unreadable, a forced system reset occurs using a Magic SysRq Key routine.","breadcrumb":{"@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#primaryimage","url":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/sprung-anti-forensics-magic-key-linux.jpg","contentUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/sprung-anti-forensics-magic-key-linux.jpg","width":1024,"height":970},{"@type":"BreadcrumbList","@id":"https:\/\/anti-forensics.com\/blog\/sprung-reboot-operating-system-when-a-thumbdrive-is-removed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/anti-forensics.com\/blog\/"},{"@type":"ListItem","position":2,"name":"sprung &#8211; Reboot Operating System (Linux) When a Thumbdrive is Removed"}]},{"@type":"WebSite","@id":"https:\/\/anti-forensics.com\/blog\/#website","url":"https:\/\/anti-forensics.com\/blog\/","name":"Anti-Forensics.com","description":"Rendering Digital Investigations Irrelevant","publisher":{"@id":"https:\/\/anti-forensics.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/anti-forensics.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/anti-forensics.com\/blog\/#organization","name":"Anti-Forensics.com","url":"https:\/\/anti-forensics.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/cropped-anti-forensics.com_.jpg","contentUrl":"https:\/\/anti-forensics.com\/blog\/wp-content\/uploads\/2024\/01\/cropped-anti-forensics.com_.jpg","width":512,"height":512,"caption":"Anti-Forensics.com"},"image":{"@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/groups\/14345620\/"]},{"@type":"Person","@id":"https:\/\/anti-forensics.com\/blog\/#\/schema\/person\/ac3dd160cb42b1409a2a55dea58beec2","name":"Max","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7ca31cae39a49ab947496651bc5c75ee545a72f31c02db1a5c31f80b28714601?s=96&d=mm&r=g","caption":"Max"},"description":"Anti-forensics involves attempts to hide data, damage the confidentiality, integrity, and availability of data in an effort to make analysis and examination of this data (evidence) difficult or impossible.","sameAs":["https:\/\/anti-forensics.com\/blog","https:\/\/facebook.com\/stercutis","https:\/\/linkedin.com\/in\/jesse-shelley"],"url":"https:\/\/anti-forensics.com\/blog\/author\/realjesseshelley_hkwwlra2\/"}]}},"_links":{"self":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts\/264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/comments?post=264"}],"version-history":[{"count":1,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts\/264\/revisions"}],"predecessor-version":[{"id":291,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/posts\/264\/revisions\/291"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/media\/229"}],"wp:attachment":[{"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/media?parent=264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/categories?post=264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/anti-forensics.com\/blog\/wp-json\/wp\/v2\/tags?post=264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}