Thanks to all for the responses to my email. I certainly wouldn't call myself a "newby" in terms of Linux having been using it for nearly 10years now. If I...
'Does such an "appropriate bootdisk" exist?'. Lets not give up so quickly! Please provide more detailed information in the following areas: 1. Tell us exactly...
The sort of thing I had in mind was something like this: 1) Boot to a text menu. 2) The only user options would be: i) Configure an IP address, either manually...
I have released a new BETA version of md5deep, my cross-platform program to compute MD5 message digests on an arbitrary number of files. It runs on Windows,...
The following happened to me twice and I don't know what I am doing wrong. A week ago I had a FAT floppy that had been quick formatted which of course still...
Not really sure what is going on here but maybe I can help. You need you make sure that the directory you are dumping your findings into is empty. If it is...
Thanks Dan, That worked. It is funny, I have had it work like how I wrote it previously, but this time it would not, I did it with paths, no paths and every...
Hello All, The 2004 Digital Forensic Research WorkShop is on for August in Baltimore, Maryland, USA. In addition, the Call for Papers is ready for your review....
Dear Colleagues I am trying to image a hard-drive using a Knoppix 3.3, Knoppix 3.4 or Knoppix-STD CD with boot floppy onto an external drive attached via the...
I should add to that this kind of assumes that you are using a USB2 drive to put the image on. If you aren't you will want to get a USB2 drives as well. David ...
I have released version 1.0 of md5deep! A brief list of the changes from the old version is below. md5deep is a cross-platform program to compute MD5 message...
I was on an other web site, and it siad that Oracle is looking at buying Vialink(vlnk) does anyone know anything about this? They were talking about what the...
I've got (what I consider to be) a fairly unique question. I thought it best to bounce this off the group before I go do anything crazy like "experiment" or...
Quoting: "Altheide, Cory B. (IARC)" ... host ... VMWare ... device ... My guess: You're subject to the limitations of the host OS. BUT: I have recently heard...
Senhores, Informo que já se encontra disponível para download (formato PDF) a Edição 01 da Revista Evidência Digital, revista criada pelos usuários do...
To All: I am running RH9. The hardware browser "sees" the tape drive as /dev/hdb, but does anyone know how I can successfully mount the drive? Google search...
Babel fish says that this means: Gentlemen, I inform that already if he finds for download (format pdf) Edition 01 of the Magazine available Digital Evidence,...
To all, This is the first in a series of Agile Risk Management LLC Linux Forensics articles. We plan on trying to release one brief article each week over the...
Hi friends, I lost vital data files from my scsi hdd which is having sco unix.I would likr to recover these files.As am newbie and request you suggest any...
Lazarus is the tool you need Take a look at: http://www.fish.com/tct/help-recovering-file and get your hands on: http://www.porcupine.org/forensics/tct.html ...
Hi, Thanks for reply.I would like to know whether TCT could able to retrive data from SCO unix.As for TCT's website,it tested on solaris,sunos,Linux and BSD...
It depends on the release version, but it should work just fine on any System V R3 based unix, which Sco was the last time I used it (ahem.... 5 years ago..) ...
... Hash: SHA1 ... Or foremost. foremost is faster, but you need to have the proper signatures. It depends on what types of files you need to recover. ... I...
To All: I am running RH9. The hardware browser "sees" the tape drive as /dev/hdb, but does anyone know how I can successfully mount the drive? Google search...
This is an item I am presently grappling with and would love to get input from those of you who've weathered a similar situation. "You" will be those computer...
Steve Fowler
sfowler@...
Mar 24, 2004 8:35 pm
463
There may be some serious spoliation issues with the "cloning over" of the original data, that should definitely be explored. A 95% full drive won't be much...
My client is well aware the drive had the new data loaded by their adversary to effectively erase the original contents; there's never been a question there....
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
