Does anyone have some EnCase escripts that they would like to run in an Open Source / Linux / TSK environment? Send me your e-scripts. I'm interested in...
Simson, I would be interested in the disk images you are compiling - You might want to include some material on file identifiers and perhaps some information...
The new PTK 1.0.5 version is ready and can be downloaded from the official website as well as from sourceforge. The program has been improved in the...
Hi all, does anyone in here knows any Linux or FLOSS application that we can use to perform mobile phone / hand phone forensic. thanks for all your attention ...
This depends on several factors...the type of network (CDMA or GSM), the manufacturer, the desktop (KDE or GNOME) you are using. Bitpim works with cdma and...
thanks a lot bro.. "Never Trust an Operating System You don't have the Source for..." "Closed Source for device Driver are ILLEGAL and not Ethical... act!" ...
... you are using. Out of curiosity...why would it depend on the desktop you are using? /*************************************** Special Agent Barry J. Grundy ...
Barry Only that each desktop has a different implementation. In other words you can "click monkey" solutions for both KDE and Gnome...of course they will work...
it should be not depends on the desktop manager that we use?? isn't it Barry? "Never Trust an Operating System You don't have the Source for..." "Closed Source...
could it perform real mobile forensic, such as read deleted file, read memory etc, maybe others could give me some advice, aside from bitpim. thanks you very...
In a word no. Mobile Forensics and tradition forensics as we know it are completely different. The answer you seek to this question is really a course unto...
OK then, thank you very much, this information really helping me rite' now. best regards, Mada "Never Trust an Operating System You don't have the Source...
Hi MRP, There are a number of applications and libraries you can use within the Linux Operating System Environment to access mobile telephones in various...
Thanks a lot bro.. this is very useful for me br, mrp "Never Trust an Operating System You don't have the Source for..." "Closed Source for device Driver are...
does anyone here aver try to imaging and recovery sim card information from linux using USB sim card reader?? thanks for ur information regards, mrp Firefox 3:...
no but I will when my idiot friend gives me my USB SIM card reader back (tomorrow). When that happens, what do you want to know? ... From: Mada R Perdhana...
is it possible to us to perform simcard recovery from linux or read all deleted data from a sim card from linux. thanks for your information... regards, Mada ...
Hi Group, Does anyone have imaged a Motorola A1200? I didn't find any commercial tools that has support to this cell phone. As the A1200's operating system is...
I have about 400 CDs that I need to image and am looking for a good tool to do it. In particular: #1 I would like to read ALL of the CD sessions, rather than...
... Hash: SHA1 Hi Simson, Matthew Shannon wrote a short article on accessing multi-session CDs http://www.agilerm.net/linux1.html As or #2, hmm cd/dvd...
Hi Simson, I do not know if you've already explored this application or not, but on the odds that you have not check out: cdfs "CDfs is a file system for Linux...
Hi Simon, I know that you can mount the cds by the cdfs, so you can list all the sessions: mount -t cdfs -o ro /dev/hdx /media/cdfs ls -l /media/cdfs ...
On Wed, 18 Feb 2009 15:37:42 -0500 ... Nice; I'd never seen this one before. The current release (version 2.6.27) won't compile on 2.6.28.x kernels, but it's...
... No problem... I don't' mind at all. It's been a couple of years since I've used cdfs, but that will prolly be changing here real soon. Make the change on...
I've discussed this idea on-and-off with a few other people on this list. I finally got around to writing up the program. Feedback is appreciated. -Simson ...
Dear all, does anyone here ever deal with evidence which using PGPDisk? any short way to bypass or maybe access the encrypted disk and read it as unencrypted...
Its real hard process. Even if you know the password. If you dont know the password access data prtk says can broute force to pgp disks. But i never tried...
I have had to work on these, you can get a bootable CD from PGP to decrypt the disk back to its original form but you will need to have 2 clones for evidence...
I already clone the disk, as it is a basic step in forensic, to avoid crashing the evidence disk. regards, Mada "Never Trust an Operating System You don't have...
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
