Search the web
Sign In
New User? Sign Up
linux_forensics
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want your group to be featured on the Yahoo! Groups website? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
Messages 2675 - 2704 of 3157   Oldest  |  < Older  |  Newer >  |  Newest
Messages: Simplify | Expand   (Group by Topic) Author Sort by Date ^
2675
Dear all, I hope the post is not too far from the topic. I am helping my friend to recover data from a damaged harddisk. Since our goal is just to get back the...
Kenneth
circle0826
Offline Send Email
Mar 2, 2008
10:34 am
2676
Hi Kenneth If it's mechanical failure you are really looking at hardware intervention. Software can't bypass a damaged motor or broken circuit for instance. If...
kern
kern.uk@...
Send Email
Mar 2, 2008
5:03 pm
2677
... intervention. ... run the ... may not ... looking to ... that. ... the image ... sometimes. ... Thanks Kern! I also think that my friend should go for a...
Kenneth
circle0826
Offline Send Email
Mar 3, 2008
8:44 am
2678
Is it possible to mount split dd images as a loopback device, or must I cat to build a single contiguous file? I checked past messages, and it looks like I've...
Lehr, John
slopd4256
Offline Send Email
Mar 6, 2008
7:11 am
2679
John, Despite I could not see it working yet, pyFLAG has the ability to mount splitted dd images, and the new versions allow to mount it using one of its ...
Tony Rodrigues
fotografo_to...
Offline Send Email
Mar 6, 2008
1:31 pm
2680
Good evening, Fow several months now an Italian team has been creating what will represent the heir of the interface Autopsy. The new project is called PTK and...
Public DFLabs Team
public@...
Send Email
Mar 7, 2008
2:57 pm
2681
Can you give us the link for downloading it? ;) Thanks ... Dott. Nanni Bassetti Consulente Information Security Socio CLUSIT, AIPSI e IISFA ...
NBS di Nanni Bassetti
nannib7013
Offline Send Email
Mar 7, 2008
11:07 pm
2682
and also the Documentation Download link, I could not found the link :) thanks NBS di Nanni Bassetti <nannib@...> wrote:...
Mada R Perdhana
mrp_bpp
Offline Send Email
Mar 8, 2008
1:56 am
2683
Looks like there is no download yet, but the docs are there. http://ptk.dflabs.com/download.html ________________________________ From:...
Daniel, Adam (AU - Sy...
addaniel@...
Send Email
Mar 8, 2008
5:05 am
2684
There is a graphic, but have you been able to get that page to download the document? I don't see a link in the HTML: <tr> <th height="50" bgcolor="#f2f2f2" ...
Dave Dittrich
dadittrich
Offline Send Email
Mar 8, 2008
5:50 am
2685
... must I cat to build a single contiguous file? John, Play around with mdadm and linear raid. I've mounted split images in this manner (using multiple...
Barry J. Grundy
grundy_b
Offline Send Email
Mar 8, 2008
2:21 pm
2686
Hi all, I'm trying to figure out a way for analysing/auditing usb storage device activity on a fedora8. Is there any way I can identify which files may have...
antek8
Offline Send Email
Mar 9, 2008
12:11 am
2687
Could we do this thing? use encase, generate encase ewf, than convert it to dd, using libewf again then using vditoo to convert it to vdi file ( virtualbox),...
Mada R Perdhana
mrp_bpp
Offline Send Email
Mar 10, 2008
2:36 am
2688
Hi, Ant. Please let me know what you find. This sounds like an interesting tool to create. ... [Non-text portions of this message have been removed]...
Simson Garfinkel
simsongarfinkel
Offline Send Email
Mar 10, 2008
5:54 am
2689
1. I have produced a modified version of Sleuthkit-2.51 which works with LIBEWF and AFFLIB. (The current version works with neither). As you know, Sleuthkit ...
Simson Garfinkel
simsongarfinkel
Offline Send Email
Mar 10, 2008
8:03 am
2690
A couple of options here, use EnCase to manually carve out the EWF to raw image, or use Lance Mueller's encript to do it for you. ...
Echo6
echo6_uk
Offline Send Email
Mar 10, 2008
2:12 pm
2691
I downloaded three of the NSRL hash sets in .iso format this weekend. I wanted to create a hash set for use with sleuthkit. I ran into trouble unzipping one...
Lehr, John
slopd4256
Offline Send Email
Mar 10, 2008
11:01 pm
2692
Why are you unzipping? What do you want to do with these hash sets? We just use them from the compressed file directly... ... [Non-text portions of this...
Simson Garfinkel
simsongarfinkel
Offline Send Email
Mar 10, 2008
11:19 pm
2693
I worked out the decompression problem. I used 7za, which failed a sha1 on the 3.3gb when I extracted all the files in the archive, but succeeded when I...
Lehr, John
slopd4256
Offline Send Email
Mar 10, 2008
11:50 pm
2694
... Simple. I don't know any other way. Can you expand on how you use the files directly? I plan a few things with these files. Concatenate the set...
Lehr, John
slopd4256
Offline Send Email
Mar 11, 2008
12:58 am
2695
Hello, I've recently downloaded the most recent distro of Helix from two different sites. I've saved onto my hdd and then burned a start-up disk from my iso. ...
Michael Prem
mjpconsult
Offline Send Email
Mar 11, 2008
5:00 pm
2696
Mike, Wow. Not sure where to begin. I think you meant the e-fense Helix forums which are located at http://www.e-fense.com/helix/forum. As far as the forum...
Andrew Fahey
zippo_p38
Offline Send Email
Mar 11, 2008
5:20 pm
2697
Drew, Wow. Thanks for the quick response. I will take a look at the hash and see if the problem is there. Didn't know about the burn speed either - another ...
Michael Prem
mjpconsult
Offline Send Email
Mar 11, 2008
5:49 pm
2698
Mike, I've gotten the same message with Helix 1.9 and am also clueless. I do have an ISO image of Helix 1.8 if you're interested. John Riley From:...
Riley, John H
jriley@...
Send Email
Mar 11, 2008
5:56 pm
2699
John, FYI I did just run MD5 against my Helix app and it did not match with the MD5 listed on the web page. Maybe it has something to do with the burn speed. ...
Michael Prem
mjpconsult
Offline Send Email
Mar 11, 2008
6:18 pm
2700
I have a question for Andrew.... why the Sleuthkit tools can't be launched from everywhere in Helix? I tried to run mmls or fls from the terminal windows and...
NBS di Nanni Bassetti
nannib7013
Offline Send Email
Mar 11, 2008
6:34 pm
2701
Because the path is not set. ... ____________________________________________ Andrew Fahey | Computer Security & Forensics Specialist e-fense Inc....
Andrew Fahey
zippo_p38
Offline Send Email
Mar 11, 2008
6:50 pm
2702
FYI Reference to the latest Helix distro: Went home and downloaded the iso again. Checked MD5 and ity matched. Made my cd at 8x. Put it in a laptop, started it...
Michael Prem
mjpconsult
Offline Send Email
Mar 11, 2008
11:59 pm
2703
Hi, Try doing a md5 hash first on the .iso images (to check their integrity) before burning them to a cd and booting them ! Regarding error 25 - it refers to a...
Alfred Tims
timsal-1@...
Send Email
Mar 12, 2008
9:35 am
2704
... Yes....I knew it... :) but why is it not set? It can be useful and confortable IMHO :) If is it possible can you set into the next release? Thanks ... ...
NBS di Nanni Bassetti
nannib7013
Offline Send Email
Mar 12, 2008
11:27 am
Messages 2675 - 2704 of 3157   Oldest  |  < Older  |  Newer >  |  Newest
Advanced
Add to My Yahoo!      XML What's This?

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help