Thanks to all for the responses to my email. I certainly wouldn't call myself a "newby" in terms of Linux having been using it for nearly 10years now. If I...
436
Kalil Daniel Contr AF...
goatboy1221
Mar 1, 2004 2:05 pm
'Does such an "appropriate bootdisk" exist?'. Lets not give up so quickly! Please provide more detailed information in the following areas: 1. Tell us exactly...
437
Pybus, David
piecrust173
Mar 1, 2004 2:56 pm
The sort of thing I had in mind was something like this: 1) Boot to a text menu. 2) The only user options would be: i) Configure an IP address, either manually...
438
Capt Jesse Kornblum U...
jessekornblum
Mar 1, 2004 9:32 pm
I have released a new BETA version of md5deep, my cross-platform program to compute MD5 message digests on an arbitrary number of files. It runs on Windows,...
439
t_maingot
Mar 3, 2004 12:00 am
The following happened to me twice and I don't know what I am doing wrong. A week ago I had a FAT floppy that had been quick formatted which of course still...
440
Kalil Daniel Contr AF...
goatboy1221
Mar 3, 2004 3:20 am
Not really sure what is going on here but maybe I can help. You need you make sure that the directory you are dumping your findings into is empty. If it is...
441
t_maingot
Mar 3, 2004 5:42 am
Thanks Dan, That worked. It is funny, I have had it work like how I wrote it previously, but this time it would not, I did it with paths, no paths and every...
442
Andrey
arfsyn
Mar 3, 2004 2:51 pm
Senhores (as); Informo a existência de um grupo de discussão sobre "Perícia Forense Aplicada à Informática" contando com as principais autoridades...
443
Kalil Daniel Contr AF...
goatboy1221
Mar 9, 2004 1:33 pm
Hello All, The 2004 Digital Forensic Research WorkShop is on for August in Baltimore, Maryland, USA. In addition, the Call for Papers is ready for your review....
444
f0rum77@...
f0rum77
Mar 11, 2004 3:31 pm
Dear Colleagues I am trying to image a hard-drive using a Knoppix 3.3, Knoppix 3.4 or Knoppix-STD CD with boot floppy onto an external drive attached via the...
445
Pybus, David
piecrust173
Mar 11, 2004 3:45 pm
USB1 is slow. You might want to consider putting a USB2 PCI/PCMCIA card in the box which should speed things up a lot. David ... From: f0rum77@......
446
Pybus, David
piecrust173
Mar 11, 2004 3:56 pm
I should add to that this kind of assumes that you are using a USB2 drive to put the image on. If you aren't you will want to get a USB2 drives as well. David ...
447
Capt Jesse Kornblum U...
jessekornblum
Mar 11, 2004 8:10 pm
I have released version 1.0 of md5deep! A brief list of the changes from the old version is below. md5deep is a cross-platform program to compute MD5 message...
448
Jim
funiny2k
Mar 11, 2004 10:12 pm
I was on an other web site, and it siad that Oracle is looking at buying Vialink(vlnk) does anyone know anything about this? They were talking about what the...
449
Altheide, Cory B. (IA...
digitalquincy
Mar 16, 2004 9:56 pm
I've got (what I consider to be) a fairly unique question. I thought it best to bounce this off the group before I go do anything crazy like "experiment" or...
450
Enda Cronnolly
endacronnolly
Mar 17, 2004 4:05 pm
Quoting: "Altheide, Cory B. (IARC)" ... host ... VMWare ... device ... My guess: You're subject to the limitations of the host OS. BUT: I have recently heard...
451
arfsyn
Mar 17, 2004 4:19 pm
Senhores, Informo que já se encontra disponível para download (formato PDF) a Edição 01 da Revista Evidência Digital, revista criada pelos usuários do...
452
Jason Fuller
eforensics
Mar 17, 2004 9:12 pm
To All: I am running RH9. The hardware browser "sees" the tape drive as /dev/hdb, but does anyone know how I can successfully mount the drive? Google search...
453
Steve Burgess
imsteve_us
Mar 17, 2004 11:02 pm
Babel fish says that this means: Gentlemen, I inform that already if he finds for download (format pdf) Edition 01 of the Magazine available Digital Evidence,...
454
Christopher Bell
cymordis
Mar 18, 2004 12:11 pm
Thank you. Steve Burgess <steve@...> wrote:Babel fish says that this means: Gentlemen, I inform that already if he finds for download (format...
455
agilerm
Mar 19, 2004 12:19 pm
To all, This is the first in a series of Agile Risk Management LLC Linux Forensics articles. We plan on trying to release one brief article each week over the...
456
raohyd
Mar 21, 2004 8:45 pm
Hi friends, I lost vital data files from my scsi hdd which is having sco unix.I would likr to recover these files.As am newbie and request you suggest any...
457
Enda Cronnolly
endacronnolly
Mar 22, 2004 12:16 am
Lazarus is the tool you need Take a look at: http://www.fish.com/tct/help-recovering-file and get your hands on: http://www.porcupine.org/forensics/tct.html ...
458
raohyd
Mar 22, 2004 12:54 am
Hi, Thanks for reply.I would like to know whether TCT could able to retrive data from SCO unix.As for TCT's website,it tested on solaris,sunos,Linux and BSD...
459
Enda Cronnolly
endacronnolly
Mar 22, 2004 8:34 am
It depends on the release version, but it should work just fine on any System V R3 based unix, which Sco was the last time I used it (ahem.... 5 years ago..) ...
460
Brian Carrier
bdcarrier
Mar 22, 2004 5:24 pm
... Hash: SHA1 ... Or foremost. foremost is faster, but you need to have the proper signatures. It depends on what types of files you need to recover. ... I...
461
Jason Fuller
eforensics
Mar 24, 2004 4:43 pm
To All: I am running RH9. The hardware browser "sees" the tape drive as /dev/hdb, but does anyone know how I can successfully mount the drive? Google search...
462
Steve Fowler
sfowler@...
Mar 24, 2004 8:35 pm
This is an item I am presently grappling with and would love to get input from those of you who've weathered a similar situation. "You" will be those computer...
463
Rob Campbell
robrachelle
Mar 24, 2004 9:37 pm
There may be some serious spoliation issues with the "cloning over" of the original data, that should definitely be explored. A 95% full drive won't be much...
464
Steve Fowler
sfowler@...
Mar 24, 2004 10:20 pm
My client is well aware the drive had the new data loaded by their adversary to effectively erase the original contents; there's never been a question there....
