Have you all seen this yet? Pretty handy CD distro. www.phlak.org I like the impersonate Windows GUI option myself Brian T. Wolfinger CIFI, CHS-III, TICSA,...
Brian T. Wolfinger
wolf369@...
Sep 2, 2004 1:12 am
781
I just wanted to introduce myself really quickly. I am very new to the forensic community so I will probably have a lot of questions once I start getting into...
Welcome Steph - there are some very knoweledgable folks here from very diverse areas of forensics so you'll be sure to have assistance when you need it. Tony. ...
Senhores, Informo que já se encontra em funcionamento o site do grupo de discussão Perícia Forense Aplicada à Informática, que também recebeu o mesmo...
For those that don't speak Portugese..... Subject: Presentation of Site "Forensic work applied to Informatics" Gentlemen, I inform you that the site for the...
Steph said: I am currently going through the High Technology Crime Investigations master's program at George Washington University Sounds like an interesting...
I had a case come in last week regarding a Compaq Raid 5 server (running an exchange database) on 4 drives going down, so they flew me to their offices and I...
Ian I am by no means an expert on Raid 5. If I understand what you posted correctly, there are actually 2 suspect drives, according to the HP people. I believe...
... That is what I believe too (What I have data wise is fooked already with the 2 known bad drives - Actually,, I think 3 of the 4 drives had some faults,, ...
Can you believe I refinanced my mortage and am saving $218 a month? Check it out... http://edgelending.net/?partid=rcc2 If you dont want to be part of this...
... the ... faults,, ... My understanding of RAID 5 is that it uses parity blocks for data redundancy. No information is duplicated or mirrored across multiple...
woops. hit the keyboard combo for send by accident.... ... disks, ... information ... disks ... to ... drives, ... http://www.acnc.com/04_01_00.html The above...
GW web site is not up to date. Program was Master of Arts in Criminal Justice with a Concentration in Computer Fraud Investigations. The program has recently...
... The shite state these drives were in I really don't give a crap about you missing a good URL. (As I had enough headaches looking at 4 SCSI drives with a...
Hi all, for forensic purposes I am trying to identify the machine where a program has been compiled. It's a statically linked, stripped, executable. Looking...
Hi, If you have statically linked and stripped executable file, the best way is to perform in depth analysis. You have to do much more than just list all...
Mariusz Burdach
M_Burdach@...
Sep 9, 2004 11:34 am
797
Anyone knows/uses a distro who has a live eval for Mac stuff (like sleuthkit cd rom or something like that) ? Purpose: low level searches on the target's mac,...
Geert VAN ACKER
geert.vanacker@...
Sep 13, 2004 8:36 pm
798
Doesn't DiskEdit support the file system? What is the file system we are talking about here? Marc Maxwell Programmer-Analyst Certified Technical Trainer ...
Try www.blackbagtechcom They have a demo download that if full function for 30 days. Gary R. Cullop Special Agent North Carolina State Bureau of Investigation ...
Sorry, www.blackbagtech.com Gary R. Cullop Special Agent North Carolina State Bureau of Investigation 501 Industrial Ave. Greensboro, NC 27406 office:...
Hello Friends, I want to know it is possi to impl to ARP in Linux if any one know please help me. _______________________________ Do you Yahoo!? Declare...
Hello Dears, Please tell me which book should i prefer for linux . __________________________________ Do you Yahoo!? Yahoo! Mail is new and improved - Check it...
I was just wondering if anyone had any opinions on the CHFI certification at eccouncil.org? It seems like they go over a huge amount of info and a huge price...
I did a quick benchmark of SMART that illustrates that SMART is able to generate a CRC32, MD5SUM and SHA1 concurrently at roughly the same speed that the...
Howdy, I am trying to get an inital MD5 of a partition before imaging it. But I keep getting MD5 input/ouput error. Is there a work around. I thought of...
Which program are you using? md5deep, http://md5deep.sf.net/ should read through any errors. -- Jesse It's so much easier to suggest solutions when you don't...
also try the "sync" option it has worked for me in the past ... From: "Rich Thompson" <tex_atl@...> To: <linux_forensics@yahoogroups.com> Sent: Saturday,...