Search the web
Sign In
New User? Sign Up
linux_forensics
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want your group to be featured on the Yahoo! Groups website? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
Messages 1669 - 1698 of 3157   Oldest  |  < Older  |  Newer >  |  Newest
Messages: Simplify | Expand   (Group by Topic) Author Sort by Date ^
1669
The Digital Forensic Research Workshop 2004 Final Report is now available at www.dfrws.org, and the DFRWS 2005 is scheduled for August 17 to 19, 2005. The 2005...
eco@...
knowledgesol...
Offline Send Email
Aug 3, 2005
7:03 pm
1670
I posted this query on the "other" Linux Forensics group, and ... I'm starting to see R-studio be mentioned more and more as file recovery software, and am...
Gary Funck
garyfunck
Offline Send Email
Aug 4, 2005
6:05 pm
1671
... I've used many,, many,, and frequently test new versions and the R-Studio does come out tops most every time for data recovery including raid arrays. ... ...
IanC
devorg
Offline Send Email
Aug 4, 2005
8:20 pm
1672
Another great one Restorer 2000 dirt cheap does a great job. ... From: "IanC" <saladin@...> To: <linux_forensics@yahoogroups.com> Sent: Thursday, August...
Melissa Royer
defender03102
Offline Send Email
Aug 4, 2005
8:26 pm
1673
How about Ontrack Easy Recovery Pro? I have to admit that I've never played with R-Studio so I cannot compare, but EasyRecovery has always been fine for me....
Luis Gómez Miralles
lgomez@...
Send Email
Aug 8, 2005
9:46 am
1674
I use R-Studio most times, but I would like to use a linux tool. The problem is that I am not aware of any linux tool to recover all deleted files at once. As...
Atila Romero
atilaromero
Offline Send Email
Aug 8, 2005
11:08 am
1675
... files > one by one, not all at once (the same for autopsy). You can use a simple script to undelete all the files at once using sleuthkit. All on one line...
Jeff Bryner
jbryner1
Offline Send Email
Aug 8, 2005
4:31 pm
1676
... Get used to that. ;) The Unix philosophy is "do something simple, and do it well" and to use pipelining (as demonstrated in the last message) to do more ...
Dave Dittrich
dadittrich
Offline Send Email
Aug 8, 2005
5:08 pm
1677
Its far more simple than I thought! I have been using Windows for a while in my exams and now I am moving to Linux. Like you and Dave Dittrich suggested, I...
Atila Romero
atilaromero
Offline Send Email
Aug 8, 2005
7:03 pm
1678
Does anyone have any experience with recovering data from tape? In specific, I am trying to recover a corrupt Arcserve session. Here's what I know: I am able...
fall_like_rock
Offline Send Email
Aug 8, 2005
9:38 pm
1679
... In what way is the tape corrupted? Is the table of contents corrupted, a block in the middle of the tape? What sort of tape media is it (DAT, DLT)? Have...
Gary Funck
garyfunck
Offline Send Email
Aug 8, 2005
10:40 pm
1680
... I see that attachments aren't accepted on this list. Try this link: http://www.intrepid.com/~gary/src/copy_tape.c...
Gary Funck
garyfunck
Offline Send Email
Aug 8, 2005
10:55 pm
1681
It's old but it still has some good features. A more popular one right now is Helix available at http://www.e-fense.com/helix/. It has its own dd GUI interface...
Todd Colvin
datagrab
Offline Send Email
Aug 9, 2005
11:25 pm
1682
... Actually, you can now skip the '-f ntfs' and you should now use 'icat -r'. For NTFS, the '-r' doesn't matter, but it is needed for TSK to start guessing...
Brian Carrier
bdcarrier
Offline Send Email
Aug 10, 2005
4:39 am
1683
I'm on sleuthkit version 1.73, it hasn't been updated in the gentoo portage tree for some reason. I see the latest is 2.02, I'll have to update. But if I get...
Jeff Bryner
jbryner1
Offline Send Email
Aug 10, 2005
3:49 pm
1684
... If you are using 2.00+ with the autodetect feature, it could be: ils imagefile.dd | awk -F '|' '($2=="f") {print $1}' | while read i; do icat -r...
Brian Carrier
bdcarrier
Offline Send Email
Aug 10, 2005
4:16 pm
1685
BackupExec will also read ArcServe formatted tapes, though I would imagine ArcServe itself would handle any error recovery when reading the contents much more ...
C Marko
gonzarthegreat
Offline Send Email
Aug 12, 2005
5:18 pm
1686
Just FYI: If you use ArcServe, be sure to use the latest version you can get. Older versions of ArcServe will sometimes purport to restore a tape made by a...
Stevens R. Miller
bobhey2000
Offline Send Email
Aug 12, 2005
6:43 pm
1687
I would like to know what methods people are using to basline-verify computer systems. I want to put together a procedure that when a workstation or server are...
Dennis Borkhus-Veto
dbveto
Offline Send Email
Aug 15, 2005
8:13 pm
1688
... I just implemented a similar program. For each new server we: 1) md5sum all files 2) nmap scan for open ports 3) nessus scan for vulnerabilities 4) If...
Jeff Bryner
jbryner1
Offline Send Email
Aug 15, 2005
8:45 pm
1689
... Dennis, I don't mean to discourage you, but its going to be a little more complicated than that. You have to deal with several cases: Files that change...
Dave Dittrich
dadittrich
Offline Send Email
Aug 15, 2005
8:48 pm
1690
I hope the following does not violate "too severely" the posting criteria for the board. I would just like to introduce myself and let "natural networking"...
wrightstephenjohn
wrightstephe...
Offline Send Email
Aug 15, 2005
9:32 pm
1691
I am look to this list for experiences with the Services, software, or the partnership program of the Vogon International company. I hope to learn more about...
forensic28sa
Offline Send Email
Aug 18, 2005
5:53 pm
1692
Do you have any in San Diego, CA? ... I hope the following does not violate "too severely" the posting criteria for the board. I would just like to introduce...
Luis Salazar
Luis.Salazar@...
Send Email
Aug 18, 2005
7:53 pm
1693
To the listserv. my bad. Please Disregard. ... Do you have any in San Diego, CA? ... I hope the following does not violate "too severely" the posting ...
Luis Salazar
Luis.Salazar@...
Send Email
Aug 18, 2005
7:56 pm
1694
Not really forensic-related, but it does involve Linux. <g> I'm trying to revive a circa 2001 system which has a 1.3Ghz T-bird running at 266 Mhz FSB. PC 2100...
Gary Funck
garyfunck
Offline Send Email
Aug 19, 2005
8:24 pm
1695
Gary, why put so much energy into an old system? Is there something special about it?...
Stevens R. Miller
bobhey2000
Offline Send Email
Aug 19, 2005
9:09 pm
1696
... That's a good question. I guess part of the answer is that I didn't _think_ I'd have to put any effort into it at all (ie, it would work as is), and when...
Gary Funck
garyfunck
Offline Send Email
Aug 19, 2005
9:27 pm
1697
... Could it be a cooling fan at fault? CPU's are funny things when overheating. (ie: if it works for even a little time then fails it's likely to be ...
IanC
devorg
Offline Send Email
Aug 20, 2005
4:34 pm
1698
... Ian, thanks. Definitely something worth checking out. In the meantime, I've plugged in another motherboard and cpu that were sitting on the shelf, and...
Gary Funck
garyfunck
Offline Send Email
Aug 20, 2005
7:38 pm
Messages 1669 - 1698 of 3157   Oldest  |  < Older  |  Newer >  |  Newest
Advanced
Add to My Yahoo!      XML What's This?

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help