Locate

When practising the tutorials it is worth using a Ramdisk. Ramdisks leave no activity trace when the machine is switched off.  SSD disks are not privacy secure.  Modern hard disks use SSD mechanisms for caching purposes and thus pose a security weakness.

In /etc/fstab write entry tmpfs /home/username/ram tmpfs defaults,noatime,mode=1777,size=20MB 0 0
creates ramdisk in directory /home/username/ram
Use Wine to run program "e_crypt7" program

Google for ramdisk software.  Free Basic ramdisk software to create 100MB of ramdisk is likely to be available at no cost.  Need to check that ramdisk software has no hidden problems attached to it.  Appropriate Antivirus and rootkit checking software is needed.  Website http://www.dataram.com/ is worth looking at.

The biggest advantage of a ram disk is the ability to have very fast loading and writing times. It also allows one to experiment without fear of doing damage to a hard disk.  It also allows one to try things out as possible approaches to security without leaving any trace.  Modern file systems use journaling which can leave traces of data on hard disks that a person may not want left.  A ram disk loses of traces of its file system when the computer is switched of.

I have lots of files on my computer system. 

The function "Locate" provides provides several types of search





Locate


  • By Mouse
  1. Click on "Utilities"
  2. Click on "Locate"
  •   By Keyboard
  1. Type "ALT+U"
  2. Type "L"
 


  • The effects of entries in (A) to (G) are shown in (O)
  • The diagrams below show examples of different entries in (A) to (G) and the result of these entries in (O)
  • The file sizes entered in (K), (L) and (M) need to be in bytes.
  • The byte sizes for various values of KB , MB and GB can be obtained by entering a value in (H), (I) or (J)
  • 1KB is 1024 bytes (h)
  • 1MB is 1,048,576 bytes (1024x1024) (i)
  • 1GB is 1,073,741,824 (1024x1024x1024) (J)
  • (U) Selects multiple drives to be searched. Drives to be searched placed in (X)
  • (Y) Selects directory to be searched. Directory to be searched placed in (Z)
  • (P), (W) and (Q) selects particulars to be searched for
    • For details of (P) , (Q), (W) see below
  • (R) Search directory listed in (Z) for particulars selected in (O), (P) , (Q), (W).
  • (S) Search directory and its sub directories listed in (Z) for particulars selected in (O), (P) , (Q), (W).
  • (T) Search multiple drives listed in (X) for particulars selected in (O), (P) , (Q), (W).
  • (c) Get "SHA1" and place it in (a)
  • (d) Get "Double SHA1" and place it in (d)
  • (e) Clear SHA1 entries in (e)








The diagrams below show examples of different entries in (A) to (G) and the result of these entries in (O)




Find and list all files Find and list all files beginning with 'A' or 'a' Find and list all files beginning with 'A' or 'a' and have 'B' or 'b' in name.
  • File "avb.txt" will be found
  • File "a.txt" will not be found
Find and list all files beginning with 'A' or 'a' and have 'B' or 'b' in name and have an extension beginning with 'C' or 'c'.
  • File "avb.cat" will be found
  • File "avb.cat.txt" will not be found
Find and list all files beginning with 'A' or 'a' and have 'B' or 'b' in name and have an extension 'txt' or 'TXT'
  • File "avb.txt" will be found
  • File "avb.txt.cat" will not be found





Find and list all files beginning with 'A' or 'a' and have 'B' or 'b' in name and have first extension 'txt' or 'TXT'
  • File "avb.txt.cat" will be found
  • File "avb.txt" will not be found
Find and list all files beginning with 'A' or 'a' and have 'B' or 'b' in name and have first extension 'txt' or 'TXT' and has a second extension
  • File "avb.txt.txt" will be found
  • File "avb.txt" will not be found
Find and list all files with name "d.t" or "D.T" Find and list all files beginning with 'any letter or number' and have 'N' or 'n' in name
  • File "0nf.file" will be found
  • File "0nf.txt" will be found
Find and list all files beginning with 'any letter or number' and have N' or 'n' in name and extension beginning with 'F' or 'f'
  • File "0nf.file" will be found
  • FIle 4nf,file.txt will not be found





Find and list all files with extension beginning with 'T' or 't'
  • file "avb.txt" will be found
  • file "avb.txt.cat" will be found
  • file "avb.cat.txt" will not be found
Find and list all files with second extension beginning with 'T' or 't'
  • File "avb.cat.txt" will be found
  • File "avb.txt" will not be found
Find and list all files that have 'B' or 'b' after the first letter of the filename  and the first extension begins with 'T' or 't'
  • File "avb.txt.cat" will be found
  • File "avb.txt" will not be found
  • File "bc.txt.cat" will not be found
Find and list all files that have 'A' or 'a' as the first letter of the filename  and the first extension begins with 'T' or 't'
  • File "avb.txt.cat" will be found
  • File "avb.txt" will not be found
  • File "bc.txt.cat" will not be found
Find and list all files that have 'A' or 'a' as the first letter of the filename and have 'B' or 'b' after the first letter of the filename and the first extension begins with 'T' or 't'
  • File "avb.txt.cat" will be found
  • File "avb.txt" will not be found
  • File "avb.cat.txt" will not be found





Examples of Display in (PQW) in relation to selections in (P), (Q) and (W)



















Search criteria





Search for files according to "File Search Parameters" in (O)


Search for files according to "File Search Parameters" in (O) and (M)


Search for files according to "File Search Parameters" in (O) and (M)

Search for files according to "File Search Parameters" in (O) and (M)


Search for files according to "File Search Parameters" in (O), (K) and (L)


Search for files less than "File Size" in (M)


Search for files of "File Size" in (M)


Search for files more than "File Size" in (M)


Search for files with size greater than (K) and less than (L)


Search for files according to "File Search Parameters" in (O) with SHA1 in (a)


Search for files according to "File Search Parameters" in (O) and (M) with SHA1 in (a)


Search for files according to "File Search Parameters" in (O) and (M) with SHA1 in (a)


Search for files according to "File Search Parameters" in (O) and (M) with SHA1 in (a)


Search for files according to "File Search Parameters" in (O), (K) and (L) with SHA1 in (a)


Search for files less than "File Size" in (M) with SHA1 in (a)


Search for files of "File Size" in (M) with SHA1 in (a)


Search for files more than "File Size" in (M) with SHA1 in (a)


Search for files with size greater than (K) and less than (L) with SHA1 in (a)


Search for files according to "File Search Parameters" in (O) with SHA1 in (a) and (b)


Search for files according to "File Search Parameters" in (O) and (M) with SHA1 in (a) and (b)


Search for files according to "File Search Parameters" in (O) and (M) with SHA1 in (a) and (b)


Search for files according to "File Search Parameters" in (O) and (M) with SHA1 in (a) and (b)


Search for files according to "File Search Parameters" in (O), (K) and (L) with SHA1 in (a) and (b)


Search for files less than "File Size" in (M) with SHA1 in (a) and (b)


Search for files of "File Size" in (M) with SHA1 in (a) and (b)


Search for files more than "File Size" in (M) with SHA1 in (a) and (b)


Search for files with size greater than (K) and less than (L) with SHA1 in (a) and (b)


Search in log files for SHA1 in (a)


Search in log files for SHA1 in (a) and (b)


Enter SHA1

  1. Click on "Get Single SHA1" (a)


  1. Click Cancel
    1. returns to previous window
  2. Click on "Get Double SHA1" (b)


  • There are a number of ways to enter an SHA1
  • SHA1 can come in two forms
    • C8DCE62229916FE9F83431958FBE8E6CB8B098FC
    • C8DC-E622-2991-6FE9-F834-3195-8FBE-8E6C-B8B0-98FC
  • When using "Paste from ClipBoard" button (E)
    • the 40 character form of SHA1 will be pasted into (F)
    • the 49 character form of SHA1 will be pasted into (I)
  • Windows (a1) to (a10) each take 4 characters of SHA1
  • "Place Signature 1" button (L) will take a SHA1 signature in  (F) and place it in (B)
  • Windows (a1) to (a10) each take 4 characters of SHA1
  • "Place Signature 2" button (M) will take a SHA1 signature in  (F) and place it in (C)


  1. Click on "Get Signature" button


  1. Click on "With Double SHA" in (P)
  2. Click on "Get Search Directory" (Y)


  1. Type "Alt+1"
    1. Ramdisk G: is selected
  2. Type "ALT+3"


  1. Click on "Search Directory and sub Directories"


  1. Click on "Hide Dialog Box"
  2. Click on "Focus" button


  • 2 Files with Double SHA1 of
  • C8DCE62229916FE9F83431958FBE8E6CB8B098FC and
  • AA82A240D3B8F3646E13E92C44CF9C5015026930
  • have been found