Forensics
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Converting an external hard drive enclosure into a write blocker? Nov 25 2007 05:49AM
Krassimir Tzvetanov (krassi krassi biz)
Well this is a little one sided.

When you are preserving a hard disk you want a snapshot in the moment
it was seized. This would mean that you should not do any alteration
after that point and I'll ask you to consider two cases that will show
you where I come from.

1. The journal replay may overwr...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus