終端機紀錄
調查員在工作站上跑過的指令。點一下指令,就像按下 Enter,會展開它的輸出。
investigator@mistport:~/芷寧給的資料$ grep -i authentication *.eml
扣款通知.eml:Authentication-Results: mx1.maskmail.tw; BeatBird電子報_1130.eml:Authentication-Results: mx1.maskmail.tw;
investigator@mistport:~/芷寧給的資料$ grep ^From: *.eml
扣款通知.eml:From: "BeatBird 會員中心" <notice@kq3fz.idv.tw> BeatBird電子報_1130.eml:From: "BeatBird" <news@beatbird.app>
investigator@mistport:~$ whois beatbird.app
Domain Name : beatbird.app Creation Date : 2019-03-11 Registrar : TWNIC 認證註冊商 HiDomain Registrant Organization : 心跳鳥科技股份有限公司 Registrant Country : TW Name Server : ns1.beatbird.app
investigator@mistport:~$ whois member-care.com
Domain Name : member-care.com Creation Date : 2026-12-02 Registrar : NameDrop Ltd. Registrant : REDACTED FOR PRIVACY Registrant Country : REDACTED Name Server : ns1.fastparkdns.net
investigator@mistport:~$ whois beatbird-help.app
Domain Name : beatbird-help.app Creation Date : 2026-12-03 Registrar : NameDrop Ltd. Registrant : REDACTED FOR PRIVACY Registrant Country : REDACTED Name Server : ns1.fastparkdns.net
investigator@mistport:~$ whois xn--batbird-7gg.app
Domain Name : xn--batbird-7gg.app(顯示為 bеatbird.app,第二個字母是西里爾字母 е) Creation Date : 2026-12-02 Registrar : NameDrop Ltd. Registrant : REDACTED FOR PRIVACY Registrant Country : REDACTED Name Server : ns1.fastparkdns.net
investigator@mistport:~$ whois kq3fz.idv.tw
Domain Name : kq3fz.idv.tw Creation Date : 2026-12-01 Registrar : TWNIC 認證註冊商 QuickReg Registrant : REDACTED FOR PRIVACY Name Server : ns1.fastparkdns.net
investigator@mistport:~$ dig txt kq3fz.idv.tw
;; QUESTION SECTION: ;kq3fz.idv.tw. IN TXT ;; ANSWER SECTION: kq3fz.idv.tw. 300 IN TXT "v=spf1 ip4:203.0.113.47 -all"
investigator@mistport:~$ dig txt beatbird.app
;; QUESTION SECTION: ;beatbird.app. IN TXT ;; ANSWER SECTION: beatbird.app. 300 IN TXT "v=spf1 include:_spf.mail.beatbird.app -all" beatbird.app. 300 IN TXT "google-site-verification=0x3bA…"
investigator@mistport:~$ dig txt _dmarc.beatbird.app
;; QUESTION SECTION: ;_dmarc.beatbird.app. IN TXT ;; ANSWER SECTION: _dmarc.beatbird.app. 300 IN TXT "v=DMARC1; p=reject; rua=mailto:dmarc@beatbird.app"
investigator@mistport:~/BeatBird提供資料$ grep avg_sleep_30d *.csv
資料提供紀錄.csv:F-03,雲杉數據,App 使用分析,user_hash / avg_sleep_30d / sleep_score / app_sessions / device_model
investigator@mistport:~/BeatBird提供資料$ grep C-05 *.csv
陷阱名單.csv:C-05,D-05,許書豪,shuhao.hsu.m9@maskmail.tw
會用終端機的話,也可以在檔案頁下載原始檔,自己用 grep 查。