... The specific situation we had was a data recovery one for a student and it was a PPT file. That one was not included in the conf file. Not sure if there...
The latest version of Foremost, released just a few days ago, has a built-in OLE mode that should recover Word, Excel, and Powerpoint files. Check out...
... Thanks Jesse. Good to know. I was under the impression that scalpel had taken over for foremost. But clearly that is not the case. And you being one of...
... By the way I see that you will also be at the St. Louis conference in January. Looking forward to another great conference. Enjoyed last year's. This...
... Hmmm...I had the same impression as Jacques. I wonder where we got that from? I had thought scalpel was a replacement for foremost and I can't for the...
Good afternoon, While reading up on Foremost and Scalpel I deduced that Foremost was no longer supported and that Scalpel had replaced it. If you read...
... Whether it has or it hasn't, if foremost has nothing to offer over scalpel feature wise, it would be great if the two teams merged. Of course, if there is...
Harry Duncan
usr.src.linux@...
Nov 5, 2007 10:38 pm
2595
Hi, Can you help me, listing/detailing the problems that can affect the capability of Foremost and Scalpel to carve a file from a dd image ? I´m studying this...
Anyone know where I can download George M. Garner's Forensics Acquisition Utilities that allows you to use dd.exe to capture Physical Memory? I believe it is...
... It's part of the Helix distribution at http://www.e-fense.com/helix/. I've used it to acquire physical memory on several occasions. There's a link to...
The Computer Forensics Analysis & Training Center (CFATC) is a 501c3 Nonprofit Organization created to provide professional workforce development in the high...
Scalpel is a complete rewrite of Foremost version 0.69. It uses some innovative techniques to make the carving of generic headers and footers much faster under...
... Makes perfect sense. I can see the advantage of Foremost in those instances. No doubt it comes with a performance hit. But like everything else there is...
Hi, Thank you very much,, and now i am doing a assignment that consists of forensic tool kits.. and its uses.. i dont know how to do that.. and i have to...
hi all, this is pavan vovveti, pursuing my masters in forensic computing after my graduation in biomedical engg.. i am new to this field.. now i am doing my...
Hey, guys, Any help on this ? I got no answer by now ... I appreciate any help. Even a link to some page where to find/study the topic. Thanks, Tony Rodrigues,...
... Try using google and find out how foremost works. The limitations are pretty damn obvious then. Have you read the foremost readme file? Harry....
Harry Duncan
usr.src.linux@...
Nov 16, 2007 5:02 pm
2607
... As Harry pointed out, there's lots of info just a google away. Search for DFTT and CFTT for (Digital/Computer Forensics Tool Testing) to get an idea of...
Hi, Im going to develop a Linux distributoon for computer forensics and coroner systems things,to finish my collage last-year project.Now I already build the...
... Hi, ... I suggest you add vinetto-alpha-0.06.tar.gz, NOT vinetto-beta-0.07 ! vinetto-beta-0.07 is buggy and it will not be corrected before the end of...
... <snip list of tools> ... Start by critically examining existing linux forensics distributions, most of which are iso based live cd distributions. Consider...
Harry Duncan
usr.src.linux@...
Dec 10, 2007 7:59 am
2613
Hi, How about a slax distro, with gnome interface? Slax distros can be booted from flash drives, i wonder if ubuntu does. Salutations ... [Non-text portions of...
... Is it a boot CD or an installable distro ? Don't forget to include basic admin tools like fdisk, disktype, lshw ... Also, don't forget to include support...
... You might also take a look at the GRML live CD: http://grml.org/ "grml is a bootable CD (Live-CD) originally based on Knoppix and nowadays based on Debian....
I really happy to all the respond from all ppl in this group.I would like to say thank you very very much for all your advice to my project.I'm very happy and...
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
