• 1: Home
• 2: Presentations
  • 2.1: Hibernation File Attack
  • 2.2: Stoned Bootkit
  • 2.3: The Rise of MBR Rootkits & Bootkits in the Wild
  • 2.4: Stoned déjà vu - again
• 3: Trainings
  • 3.3: Hibernation File Attack - Reino de España
• 4: Articles
  • 4.1: Polymorphic Encryption Methods
  • 4.2: Writing a Boot Scan Engine
  • 4.3: The Magic of Bootkits
  • 4.4: Analysis of Sinowal
  • 4.5: Advanced Analysis of Sinowal
  • 4.6: Microsofts Rich Header
  • 4.7: Analysis of Conficker
  • 4.8: CIPAV
  • 4.9: Windows Exception Handling
  • 4.10: Pagefile Attack
  • 4.11: Software Watermarking
  • 4.12: Analysis of Stoned
  • 4.13: The Old New Thing About Development
  • 4.14: AntiWPA
  • 4.15: Kon-Boot
  • 4.16: Compiling Shellcode
  • 4.17: Elevated rights, process token and security identifier
  • 4.18: Abusing the TrueCrypt driver
  • 4.19: Nothing new: Msvcrt.dll
  • 4.21: Identifying Source Code
  • 4.22: Analysis of Mebratix
  • 4.23: Popsomp Hills
• 5: Projects
  • 5.1: DiskEdit
  • 5.2: Forensic Deletion Software
    • 5.2.1: Additional Deletion Methods
    • 5.2.2: Visual C++ Source Code
  • 5.3: Forensic Lockdown Software
  • 5.5: Information System
  • 5.6: QuickView
  • 5.7: Smart Boot Manager
  • 5.8: USB View
  • 5.9: Windows 3.1 Emulation
  • 5.10: Windows Boot System
  • 5.11: AV Tracker
  • 5.12: EIPTN
• 6: Services
  • 6.1: Boot-US work
  • 6.2: TeraByte Unlimited work
  • 6.3: EPIGUS work
• 8: Research
  • 8.1: Ascrimez Kit
  • 8.2: Analysing the PDF Exploit
  • 8.3: ZeuS
  • 8.4: infobox.ru: Botnet
  • 8.5: Operating System Development
  • 8.6: 4 million email addresses
• 9: About
  • 9.1: Links
  • 9.3: Peter Kleissner
  • 9.4: Last Modified Pages
  • 9.5: Meeting Points
  • 9.6: Live Search
  • 9.7: Terms of Use
  • 9.8: Contact

Forensic Lockdown Software

Forensic Lockdown Software is a new product for totally locking down a workstation.

It should be executed in emergency cases (over Remote Execution) to lock down affected workstations and ensure security. From a users view the locked down computer is useless, from the administrators evidences (the hard disk, logs, etc.) are secured.

The software takes following actions to lock down the computer:

• Encrypting Partition Table and Boot Code
• Encrypting File System Structures
• Changing BIOS Password and Boot Order
• Lock Hard Disk with Password

During the unlock process following conditions have to be met for successful unlockment:

• Password
• Unlock Media (Floppy/CD/DVD/USB stick)
• Unlock Media with special unlock-code
• Date/Time Stamp
• Hardware Identification

Download the documentation at http://www.viennacomputerproducts.com/downloads/Forensic Lockdown Software/Forensic Lockdown Software.pdf.
A product review is available at http://www.viennacomputerproducts.com/downloads/Forensic Lockdown Software/Product Review.pdf.

You can download a one-click emulation with a locked-downed Windows 3.1 under Forensic Lockdown Software Alpha 3.zip.

Here are some Screenshots:

• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
•