Greetings, And my apologies to those that may be getting this more than once. I wanted to announce the updates to the www.e-evidence.info site (See the 'What's...
I generally quote a fixed rate of say $250.00 per hour that I spend on the assignment (plus expenses if I need to travel) with a $1,250.00 deposit up front per...
Through trial and error we have split our fees in two, namely a price for imaging and a price for analysis. We charge $300 to image a drive, and we charge $50...
... In regards to your above I don't really market myself and have thus far relied upon word of mouth for clients mainly.. But if a client 'doesn't understand'...
... We split it in 3: imaging / analysis / litigation support ... We charge more, but that covers data retention for a year. If they need long term storage /...
Hi, Im having a problem with copying large image files with cp. Ive got a number of files 18GB and over sitting on a 250GB drive formatted at ext2 and im...
Adam Daniel
adamd@...
Nov 2, 2004 11:36 pm
946
I might be missing the point but why is dd a problem or not the solution? #! /bin/sh cd sourcedir for a in * do dd if=$a of=destdir/$a done or something...
Kudos to Ian for starting an interesting thread. And thanks too for Andrew's input, coming as it does from his high station in this biz (IMHO). I think you...
Steve Fowler
sfowler@...
Nov 3, 2004 2:27 am
948
... [snip] ... [snip] For me, it has always been about delivering value. I believe value is subjective, but it translates to dollars readily. You've also...
And God will bless you abundantly !! ... From: "Andrew Rosen" <asrdata@...> To: <linux_forensics@yahoogroups.com> Sent: Wednesday, November 03, 2004 9:51...
The Linux/SMART training is set, and I have more information now. It has taken a little over a month to get the details worked out and make sure there was...
<snip> ... There is sometimes a fine line, it seems, between charging a client for learning curve and charging for work done under previous competence. I have...
... I regard data forensics in many of the same ways I regard flying. Both are fun and challenging and a mistake can have serious consequences. Without ...
Which one pays better: flying... or heart surgury? Hmmmm.... ;-) I, for one (& I'm sure I'm not alone) much appreciate your time & insight! Thanks...
Steve Fowler
sfowler@...
Nov 4, 2004 12:20 am
955
I'm working on a forensic case involving 4 systems networked (the server had two drives so 5 drives in all). The server was running when a (forensic guy) ...
That brings me to a point that crossed my mind recently .... Let's say you image a server today, take your MD5s today, yada yada. Another examiner images it...
Hi Chris, I am an IT consultant who is focusing on forensics and especially Linux. I am also a graduate student at the National Center for Forensic Science,...
The link to register for the training is now up on ASR Data's Website. http://asrdata.com/training/ Andy is in the process of putting together a course...
Dd/Image your forensic drives (so you can use them again as clean ones for every examination). Maybe it is... And maybe it aint good advice.... But my thoughts...
Ian, I follow what you are saying, but unless you disable certain functions in windows, just having the image on another drive doesn't necessarily protect you....
T, I think you missed Ian's point. When you said << So much so I'm going to completely wipe and reinstall windows when I'm done with this case ... You would...
I'm curious as to what you can do in Windows that you can't do in *nix. ... __________________________________________________ Do You Yahoo!? Tired of spam?...
... Yes that was my point James. After analyzing a forensic image upon a main forensic hard drive and extracting files folders etc I would invariably be left...
I was speaking more towards ease of use and feature rich apps that don't exist for the forensics world in *nix. I was talking about the applications not the...
James, ... You're correct. I did. T james.holley@... wrote: T, I think you missed Ian's point. When you said << So much so I'm going to completely wipe and...
... 1. I can write out a report in MS Word format that the client can read for starters. (Open Source software hardly any of my clients use,, or can read). 2....
... I write most of my reports in LaTeX and then give them the PDFs. It's not their job to modify the report, but if they MUST I give them rtf. Realising that...
I think you have some very good points about starting with a fresh image for each analysis, Ian. I haven't actually considered the idea before...but it makes...
... As with Brendan I provide reports in PDF, created in OpenOffice, which can also save in .doc format, rtf, ps and a variety of other formats. ... Imagine...
... Thanks for your reply. Specifically, which easy to use feature rich apps are you referring to? Is there some forensic feature or functionality you have ...