I appreciate this thread was answered but I have a stupid question regarding time/date stamps of files. Is there a way to figure out when the computer clock...
392
Enda Cronnolly
endacronnolly
Feb 2, 2004 8:15 am
... regarding ... I know the modern Phoenix bios tracks this, caused a problem with some eval software licence from phoenix last year. However, whether changed...
393
Rich Thompson
TEX_ATL
Feb 3, 2004 3:08 pm
Try finding back-up copies for the registry, depending on when they were made you might find the evidence of him changing the times.... I think some registies...
394
IanC
devorg
Feb 3, 2004 11:01 pm
Thanks Rich & Enda for the assistance. There was no back-up of reg settings that assisted here and there were no Instant messenger apps (or other apps) logging...
395
Christopher Bell
cymordis
Feb 3, 2004 11:32 pm
From my understanding, they should have a list of where he or she dial in from. They would have the IP addresses from the server and the phone number in the...
396
The Dog's Bollix
ISXPRO
Feb 4, 2004 1:51 pm
Ian, I'd supoena the telco on the receiving or ISP's side. They'll have records for the dial-in number, Most Telco's retain this information (if you recall...
397
Brian Carrier
bdcarrier
Feb 4, 2004 5:49 pm
... It turns out this is a known issue with out an easy fix: http://www.cs.helsinki.fi/linux/linux-kernel/2002-43/index.html#754 There are other list messages...
398
David Wilson
drindles
Feb 5, 2004 3:15 am
Ernst & Young is looking for computer forensic sprecialists in New York, Dallas, Chicago, Atlanta and Los Angeles. Applicants must have a 4 year degree. Both ...
399
Ernie Baca
dborderman
Feb 7, 2004 6:27 am
Putercops.org is up and running!!! This website is the new home for cybercopmail.com! As a result of my growing projects, I have switched to a system that is...
400
IanC
devorg
Feb 10, 2004 11:18 pm
Is there a quick & easy way to get the hash value of a name/handle/email address/or - word/words? Something like getting the hash value of a file? Best Regards...
401
t1ck_t0ck
Feb 11, 2004 2:39 am
I'm not sure if this is what you're looking for, but this works: root@0[knoppix]# echo t1ck_t0ck | md5sum 8589b0a36bc289b9f60d2183a6d18d6d - Which is, of...
402
IanC
devorg
Feb 11, 2004 3:09 am
Thanks but I think that would be harder than what I'm aiming at. What I'm wanting is; instead of having a hash value of a file to exclude it from a search; I...
403
Rob Campbell
robrachelle
Feb 11, 2004 5:06 am
I think you may be misusing the word hash. DO you mean a string? You could for instance create a grep that finds any instance of "@linux.org" or...
404
Jason Upchurch
sploithunter
Feb 11, 2004 3:03 pm
Ok, if your problem is you have 14000+ email handles and the like to search for in a large data set, this is how I would approach it. Put your 14000+ email...
405
IanC
devorg
Feb 11, 2004 3:48 pm
Thanks Rob & Jason... That's it. I was confusing myself thinking about it but seeing it in black and white (limiting the number of false positives) has helped...
406
fuerst@...
helvetus2004
Feb 13, 2004 4:49 pm
Hello list members I'm looking for a person located near or in northern Virginia which is able to make a forensic 1:1 copy of a hard disk located in a private...
407
Andrew Rosen
asrdata
Feb 13, 2004 5:31 pm
Hello Phillip - If you have a trusted source in Northern Virginia, there are several alternatives you may want to consider. If the system has broadband...
409
IanC
devorg
Feb 14, 2004 12:45 am
... Can you not get your client to FedEx the drive to you? All you would need is for them to box it properly,, insure the package,, have a tracking number to...
410
maximilien Schuld
kohmvf55@...
Feb 14, 2004 3:53 pm
Files In The Members Section Have Been Updated ... Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online [Non-text portions of this message have...
411
cymordis
Feb 14, 2004 7:53 pm
I am studying Information Security with my main area in forensics. I see that you are posting information into the uploaded files area but I am not able to...
412
Enda Cronnolly
endacronnolly
Feb 14, 2004 8:00 pm
There is no files section, and no upload facilities. The messages concerned eminate from spammers or from persons attempting to spread malware. They attach...
413
t_maingot
Feb 15, 2004 5:04 pm
I know there is a command to log all your command line inputs and what it returns to a logfile so you have a complete history of what you did in a session. I...
414
Michel Roukine
m_roukine
Feb 15, 2004 5:16 pm
script ? Michel ... I know there is a command to log all your command line inputs and what it returns to a logfile so you have a complete history of what you...
415
t_maingot
Feb 15, 2004 6:34 pm
That was it. Thanks Michel. Trevor...
416
Ernie Baca
dborderman
Feb 16, 2004 3:59 am
I would like to announce the opening of a new section at Linux-Forensics.com. I have opened a members only Law Enforcement Forum. If you visit the forums...
417
Ernie Baca
dborderman
Feb 16, 2004 4:04 am
On the e-mail address it can be an address other than the one on this list. As a matter of fact you must have a verafiable E-Mail address to apply. No...
418
maximilien Schuld
kohmvf55@...
Feb 16, 2004 8:06 pm
This Message Has Been Deleted ... Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online [Non-text portions of this message have been removed]...
419
Enda Cronnolly
endacronnolly
Feb 18, 2004 8:20 am
Got to wipe a disk to DOD standards before you restore an image to it? Someone brought this opensource project to my attention, and it looked interesting...
420
maximilien Schuld
kohmvf55@...
Feb 18, 2004 10:25 am
New Pictures Uploaded Into Members Section ... Do you Yahoo!? Yahoo! Mail SpamGuard - Read only the mail you want. [Non-text portions of this message have been...
421
Altheide, Cory B. (IA...
digitalquincy
Feb 18, 2004 5:20 pm
... DBAN is fantastic - and the author is incredibly responsive to bug reports/feature requests. He patched his tool to wipe the last sector on odd-sectored...