Opened 4 years ago

Closed 4 years ago

#6845 closed project (fixed)

Forensic Analysis of current TBB on Windows 7

Reported by: phobos Owned by: runa
Priority: Medium Milestone:
Component: Applications/Tor bundles/installation Version:
Severity: Keywords: SponsorJ SponsorL
Cc: g.koppen@…, runa, StrangeCharm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description


Child Tickets

Attachments (2)

noriben.txt (547.6 KB) - added by runa 4 years ago.
windows_changed_files.txt (22.2 KB) - added by runa 4 years ago.

Download all attachments as: .zip

Change History (16)

comment:1 Changed 4 years ago by phobos

  • Type changed from defect to project

comment:2 Changed 4 years ago by phobos

I started this out of curiosity on a fresh Win7 system. See https://wiki.lewman.is/torleaks for the output.

comment:3 Changed 4 years ago by gk

  • Cc g.koppen@… added

comment:4 Changed 4 years ago by runa

  • Cc runa added

comment:5 Changed 4 years ago by phobos

Status?

comment:6 Changed 4 years ago by runa

I have everything set up and ready to go, so some progress has been made. I expect to have some partial results within the next couple of weeks.

comment:7 Changed 4 years ago by phobos

  • Keywords SponsorL added

comment:8 Changed 4 years ago by phobos

  • Keywords changed from SponsorJ, SponsorL to SponsorJ SponsorL

comment:9 Changed 4 years ago by runa

The use case I am going to cover is:

  • User boots Windows 7
  • User logs in as a normal user (i.e. not admin)
  • User attaches an external drive
  • User copies the Tor Browser Bundle archive from the external drive to the Desktop
  • User extracts the Tor Browser Bundle
  • User runs the Tor Browser Bundle by clicking on the Tor Browser icon
  • User browses a few sites in the Tor Browser
  • User closes the Tor Browser window and clicks the Exit-button in Vidalia
  • User deletes the Tor Browser package and archive, and empties the trash
  • User shuts down Windows 7

comment:10 Changed 4 years ago by runa

  • Owner changed from erinn to runa
  • Status changed from new to assigned

Changed 4 years ago by runa

Changed 4 years ago by runa

comment:12 Changed 4 years ago by StrangeCharm

  • Cc StrangeCharm added

comment:14 Changed 4 years ago by runa

  • Resolution set to fixed
  • Status changed from assigned to closed
Note: See TracTickets for help on using tickets.