Hi list, I was wondering if some has info, tips/tricks or advice about reconstructing a hardware RAID out of images of every disk involved. Suppose we have a...
forensics@...
Oct 19, 2006 10:14 am
2354
Jelle, SMART has built in tools that let you "guess" the structure of the raid if you don't know it, and their training classes go indepth into how you...
... If it was me, I'd first have a good read of the linux software raid howto: http://tldp.org/HOWTO/Software-RAID-HOWTO.html Then I'd look at this list's...
Harry Duncan
usr.src.linux@...
Oct 19, 2006 2:10 pm
2356
Hi Guys, Are there any linux tools which will let me mount BSD slices and work with them as if they were regular partitions? I can image a Mac drive for...
Aine Douglas
aine.douglas@...
Oct 19, 2006 2:47 pm
2357
Folks, Does anyone know how to create a true slice on a BSD/Linux node. I know that Solaris uses Solstice DiskSuite or some type of volume management where you...
Hi list, although not linux specific. You all know disks which make these clicking sounds. What is your approach into handling these disks and recover as much...
Emat
forensics@...
Oct 22, 2006 7:30 pm
2361
I find that if I carry the disk around in the back of my car for two days while I scour every computer recyclers in my locality, the drive has cooled down to...
Harry Duncan
usr.src.linux@...
Oct 22, 2006 8:07 pm
2362
Jelle, When a hard drive is clicking (aka: the click of death), you should know that ANYTHING you do that causes the disk platters to rotate is very likely to...
Steve Fowler
sfowler@...
Oct 23, 2006 6:49 pm
2363
Ok Thanks for the info and tips, ... I'm setting up a test environment and see how it works out. Cheers, Jelle...
Emat
forensics@...
Oct 24, 2006 6:51 pm
2364
Has anyone ever used a process to recover data from a cut up diskette? I saw a biography of Supervisory Special Agent Jim Christy and noticed that he had...
Get yourself a silica gel pack, an anti-static bag and a freezer bag. Seal your drive up in these and whack it in deep freeze overnight (this shrinks the metal...
Jelle, This may be a bit off track with what you are trying, but most forensic based distros will allow you to see a smartarray RAID array as a single volume...
I recently had a client ask me why I have never bothered to obtain any of those product-specific *CE certifications. I gave him a number of reasons, but my...
Stevens, I have used several arguments to explain my reluctance to obtain one of the 'recognized' CF certifications: LE only certs (self-explanatory) ...
Here, here. While there may not yet be a generally recognized and accepted "CPA" equivalent certification standard or training process for 'computer ...
Ok here goes my politically incorrect statement as usual and realistic approach based on personal experience. Sometimes we get so caught up in a laboratory,...
... Avoiding the 'to cert or not to cert' question and focusing on what to get, I'd recommend SANS (www.sans.org) and their certs. They have a continued focus...
... Yeah, to me it is a said statement that there used to be only one version; do the practical + pass the test(s) or don't get the cert. Now there's an option...
... That is the way many people felt when they made the change. I learned more from the practical than anything else. K Murphy...
maillist
maillist@...
Nov 8, 2006 12:00 am
2375
My question is: if a suspect uses Linux and burns a .iso image to a CD-ROM using a utility such as k3b, is there any way to forensically trace the burned...
... It is sometimes possible to find remnants of the ISO creation process in deleted file space, including contents of the files that were included in the ISO...
Here is my two cents, This has always been a concern of mine, Which Cert. to invest your money into that is recognized by both corp. and LE and gov.. In the...
... I remember seeing a show on that. The military had done it I believe. It was a 5 1/4" floppy at the time. The guy cut it up in pieces as the military...
I have seen the same doco. From memory they used Anadisk http://www.forensics-intl.com/anadisk.html on the spliced disk. I am pretty sure it contained some...
I attended training for IACIS in 1994 and we dui the cut up diskette deal. We were each given a diskette that had been cut in large chunks. As I remember the...
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
