In this video.
We're going to go over a couple of ways to keep your data safe.
Now, two main things you want to keep in mind are having a good password manager and also a way to
encrypt your data if you need to encrypt your data.
Now, Keepass is a really good way to help keep your passwords safe.
It is a password manager, which means that it stores our username and passwords URLs, which is really
handy because as we do in investigations, chances are we're going to have a lot of different accounts
and also a lot of passwords have to remember.
Now, instead of writing down, it's great to keep in a password manager because it is encrypted in
this case is 256 bit a is a s rather encryption.
And this works for Windows, Linux and OSX.
The other thing we could use is a.
A password system here like beam beam to it's a credit card sized device that actually stores your password,
has biometrics in there, and also acts as a two factor authentication.
Personally, I actually use both devices and I like them both a lot.
However, for this, we're going to actually talk about Keepass a little bit more.
So again, Keepass is free.
It's really easy to install, so I'm not going to go over that.
You can find it over at Keepass iSCSI dot org and download it for your particular platform.
So once you have it installed.
We could actually just go to database and we could set up a new database.
And in this case, I'm just going to call this demo and you could add a description if you want and
click continue.
And here we can do the decryption time, the database format.
I'm going to leave everything default, click, continue.
We give that a moment and we enter a password.
And click done.
And it wants to save your password.
I'm just going to type demo here so I know what this is and.
Here we have our our database here.
Now, the nice thing is we could actually set up new groups in here.
I can call one O.S..
And I can create another one.
Say.
A new group.
I could do social media.
So we can keep things kind of organized.
Now within these groups, I can go in here and click the plus and I could put a title.
I could do things like Sock puppet.
Account and username.
John Doe and password and a URL say https ww w gmail.com.
For example, we can set an expiration date and note.
So no, it's like a put down sock puppet for gmail.
John Doe male age 29.
Location, Seattle, etc., etc. and then we can click.
Okay.
Now, the nice thing about this is.
Uh, password managers are great because if someone puts a keylogger on your system, keylogger designed
to log the keystrokes.
Now, if you use an password manager, there is no keystrokes to to record.
So if I go here, I could do copy username and say, Go in here, I could do paste, it'll paste a username,
I can go back in here.
I could do a copy, a password.
And I could do paste in.
It'll copy the password.
That makes things really easy.
Now, if I go back in here again, I have a title, I have my username, I have my password, I have
my URL, so I could even have it type in the URL if I want.
So they close this.
Let's go back in here.
Open database.
Demo.
And if we right click in here, we could do auto type sequence password username.
We can clone the entry and whatnot.
Open the URL.
It makes things really easy.
And again in this is the whole thing is encrypted again we could we could put as many passwords in here,
URLs that way we don't have to remember all these different things.
Again, it makes it really handy and much more secure than, say, having the same password for everything,
having the same username for everything.
This really helps keep things kind of straight.
And of course, we could always go again.
I like using this device also in addition to Keepass.
Again, this is a little credit card, literally a credit card sized device as biometrics to log into
system.
You could run it off your computer again.
Of course, it is going to be more expensive than running a free program.
But this is I like having this around as a two factor authentication, also having passwords on the
go.
Now, another thing you want to consider looking at is very crypt.
Now, very crypt will actually encrypt different volumes for you.
We can encrypt a USB drive, we can encrypt folders on our on our system and whatnot.
And again, this is for Linux, for OSX and for Windows.
So if I have a drive or a folder I really want to encrypt, say we're doing an investigation, we're
collecting information, we're collecting evidence, and I want to make sure that it's secure.
I'm going to use something like Vera Crypt so I can open this up and we can encrypt different volumes
here.
Now we can go in here.
We can create a new volume encrypt file or container crypt, non system partition drive, encrypt our
entire drive if we want to.
I'm just going to do encrypt a file container.
Click next.
And we could make it hidden and we can make it stand.
Or I'm just going to go through the defaults here.
And never saved history.
I'm going to select a file here.
Let's go into our desktop.
I'm going to demo them.
I do test two.
And that's going to create a volume.
I'm going to click next, and we could select the encryption algorithm.
I'm going to leave it as.
And we could do the hash algorithm shall 512, whirlpool shall 2 to 56 treat bug and we'll leave it
sha 512.
Click next.
In here, we determine how large that volume size is going to be.
We can make a kilobytes, megabytes, gigabytes or even terabytes.
So since it's a demo, I'm just going to make it one megabyte, click next, and we want to create a
password.
Okay.
And I'm just going to put a bad password in here because this is a demo.
And also show you this.
So if we create a password that's really bad, it's going to warn us the password is too short, easy
to crack using brute force techniques.
They do recommend using 20 characters or more.
So I'm going to click.
Yes, we're still going to use this because this is a demo.
But of course, if you have something else, something important, you should actually adhere to their
recommendations.
So you just randomly move your mouse that way it.
It does the encryption we do format and IT formats a new section.
Okay.
So I am going to click next cancel out of here.
And now we have our new volume here.
So if I try to go to test two, it has no way to open it, doesn't know what this is and it's unable
to open it.
But if I go to to mount here or slight file, I can do mount.
Actually, let's see, it's like file.
We'll go to the desktop here.
Let's go to our demo test, too.
And now this is selected.
We're going to do mount, and we're going to do our password.
Click.
Okay.
And now this is actually unlocked.
If I double click this, it'll open this up and I can put things in here.
I could do a new text file, secret password, for example.
And we can drop an error file in there.
Important data.
K and if I do, dismount.
I can't get back in that folder again.
Matter of fact, if I just click on Oh, it's going to ask me for the for the password again, I can
click password.
It'll take a little bit to decrypt it, open it up and there's our files again.
So again, using things like Vera crypt, using things like Keypad, SCSI, PMU, and also two factor
authentication are all great ways of helping keeping your data safe, which is always going to be important
for the integrity of your investigation, especially if you're doing an investigation for a company
or a person.
You want to make sure that data is safe, secure, and that your client has reasonable expectations
of security.
So thank you for watching and I'll see you next video.