Forensics
Re: USB devices with internal memory Oct 25 2007 07:06AM
hackman venus dti ne jp
Hi, Michael!!

Your opinion is very good to me.

Windows and other OS's architecture take that devices via USB as HID or external disk drives.

And so, this case, I think about it USB as disk controler.

My method is sniff USB traffic using tools just like SnoopyPro-0.22.

Or I check it using disk dump tool why their driver's behavior is very similler to IDE or SCSI drivers.

Devices have same format on cards/sticks/drives.

Hiroaki Kondo

Network Security Consultant in Japan

hackman a venus.dti.ne.jp

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus