Forensics Mode:
(Page 8 of 84)  < Prev  3 4 5 6 7 8 9 10 11 12 13  Next >
RE: vmware converter 2007-02-13
Steven Hay (shay communitysavings ca)
We've tried that product in testing, but we ended up purchasing this
product (DDChanger):

http://www.helperapps.com/index.php?option=com_content&task=view&id=1&It

emid=34

We were trying to convert boot from SAN Intel blades to VMWare servers
running on an AMD Opteron VMWare ESX box. It was a lot

[ more ]  [ reply ]
RE: file's last acces time on NFTS with Windows XP 2007-02-13
Jamie Gordon (jamie des co uk) (3 replies)

I thought that files times on NTFS volumes were always stored as UTC? At
least, that's what I read:
http://msdn2.microsoft.com/en-us/library/ms724290.aspx

Windows being able to display the time as a local time I would expect to
be purely a FileTimeToLocalFileTime() call away.

Jamie Gordon

-----

[ more ]  [ reply ]
RE: file's last acces time on NFTS with Windows XP 2007-02-13
Robertson, Seth (JSC-IM) (Seth Robertson-1 nasa gov)
Re: file's last acces time on NFTS with Windows XP 2007-02-13
Robert Reed (rreed567 earthlink net)
Re: file's last acces time on NFTS with Windows XP 2007-02-13
Greg Freemyer (greg freemyer gmail com)
DFRWS 2007 File Carving Challenge Released 2007-02-13
Brian Carrier (carrier digital-evidence org)
The DFRWS 2007 File Carving Challenge has been posted:

http://www.dfrws.org/2007/challenge/

Submissions are Due July 9, 2007.

This years challenge builds upon last years and adds more file types
and scenarios. File carving is the process of extracting files from
data using file type specific

[ more ]  [ reply ]
ADFSL 2007 Conference on Digital Forensics, Security and Law 2007-02-11
Glenn Dardick (gdardick dardick net)
ADFSL 2007 Conference on Digital Forensics, Security and Law
VENUE: Arlington, Virginia USA on April 18-20, 2007
KEYNOTE: Jim Christy, Director of the Defense Cyber Crime Institute

The ADFSL 2007 Conference on Digital Forensics, Security and Law will be held in Arlington, Virginia USA on April 18-

[ more ]  [ reply ]
CFP: AMCIS 2007 Mini-Track: Digital Forensics and its Role in Security, Law and Accounting 2007-02-11
Glenn Dardick (gdardick dardick net)
AMCIS 2007 Colorado: http://www.biz.colostate.edu/amcis07/
TRACK: Security & Privacy
MINI-TRACK: Digital Forensics and its Role in Security, Law and
Accounting
DATES: August 9-12, 2007
LOCATION: Keystone, Colorado, USA
------------------------------------------------------------------------

-
Papers

[ more ]  [ reply ]
TOC: V1N4 Digital Forensics, Security and Law, Journal of 2007-02-11
Glenn Dardick (gdardick dardick net)
Dear colleagues:

Information on the fourth issue of the Journal of Digital Forensics,
Security and Law (JDFSL) is now available as follows:

Volume 1 Number 4, 2006
Published: December 31, 2006
ISSN: 1558-7215 (print)
ISSN: 1558-7223 (online)
Journal Website: http://www.jdfsl.org
Issue Abstracts:

[ more ]  [ reply ]
Re: /proc forensics 2007-02-10
hackman venus dti ne jp
Dear Kush,

Are you already try the good tool "procget" on Linux box?
procget can save contents for fornsic use.

Regards,

Hiroaki Kondo
Security Consultant in Japan.
hackman a venus.dti.ne.jp

[ more ]  [ reply ]
file's last acces time on NFTS with Windows XP 2007-02-11
stefano bizzarri gmail com
Hello everybody,
a while ago, while analysing some files inside HDDs with the NTFS file system I came
across something odd: the day time of the files written into the disks by Windows Xp was in
GMT format even though the bios time was set on the local time (which in my case is CEST).

I noticed that

[ more ]  [ reply ]
/proc forensics 2007-02-01
kush wadhwa niiconsulting com (1 replies)
IS there any method to take mirror copy of /proc with all sym link and hard link over the network. Condition is it should not write on hard disk. Particular method should send data on the fly to remote machine. Thanks in advance

Thanks & Regards,

Kush Wadhwa - RHCE, CEH
Security Analyst - NII Con

[ more ]  [ reply ]
vmware converter 2007-02-09
Jeff Bryner (jbryner1 yahoo com) (1 replies)
Re: vmware converter 2007-02-15
A. Ramos (aramosf unsec net)
CFP - Journal of Digital Foresnics Practice... 2007-02-05
Gary Kessler (gary kessler champlain edu)
Hi all!

The Journal of Digital Foresnic Practice (JDFL) is still alive and well, and we are actively seeking papers from practitioners. This call asks for papers by 2/28 for the next issue but we are always seeking material. Please consider writing -- and feel free to contact me with questions or q

[ more ]  [ reply ]
Memory dumping with NtSystemDebugControl - caching issues 2007-02-04
Arne Vidstrom (arne vidstrom ntsecurity nu)
Hi all,

Back in June 2006 I wrote about caching issues when PhysicalMemory is
used for memory dumping
<http://ntsecurity.nu/onmymind/2006/2006-06-01.html>. PhysicalMemory is
not the only option for memory dumping from User Mode though. There is a
system call named NtSystemDebugControl which has

[ more ]  [ reply ]
Updated Conference and Training List 2007-01-23
Baker, Dave (bakerd mitre org)
An updated conference and training list is available at the following
url:
http://www.forensicswiki.org/wiki/Upcoming_events

Dave B.

--------------------------------------------------------------------
David W. Baker bakerd (at) mitre (dot) org [email concealed]
Lead Information Systems E

[ more ]  [ reply ]
CALL FOR PAPERS - DFRWS 2007 2007-01-23
Baker, Dave (bakerd mitre org)
Call for Papers

The 7th Annual Digital Forensic Research Workshop (DFRWS 2007)
August 13-15, 2007

Omni William Penn Hotel
Pittsburgh, PA, USA
www.dfrws.org
df

[ more ]  [ reply ]
EUSecWest 2007 Papers 2007-01-19
Dragos Ruiu (dr kyx net)
Hi,

For those who asked, we are still processing the submissions for CanSecWest
and the call closed, please stand by. The paper selections are back from the
reviewers for EUSecWest, in London on March 1-2.

In absolutely random order:

Threats against and protection of Microsoft's internal network

[ more ]  [ reply ]
DIMVA 2007: Final Call for Papers 2007-01-18
Robin Sommer (info dimva org)
Dear Colleagues,

this is the final Call for Papers for DIMVA 2007, the Fourth GI
International Conference on Detection of Intrusions & Malware, and
Vulnerability Assessment; which will be held in Lucerne,
Switzerland, on July 12-13, 2007.

Paper submission is now open at http://www.dimva.org/dimva

[ more ]  [ reply ]
Physically damaged SD card - summary and update 2007-01-17
Michael Edwards (medwards digital-legal com)
Thanks much for the suggestions, which have included:

Recovery programs, such as Zero Assumption Recovery;
Suggesting imaging the card and working with the image;
Powered vs. passive USB, low speed mode;
Try it in the original device (camera);
Place SD card in the freezer;
Heating the foil runs to

[ more ]  [ reply ]
RE: Physically damaged SD card 2007-01-09
PPowenski oag com
Just an idea for an alternative way of getting the chip off.

I have not performed this kind of thing for forensics but have removed
surface mount chips from pc boards occasionally.
The most sucessful, for me, is to get a exacto razor knife and slowly
cut the pins from the board. The solder is soft

[ more ]  [ reply ]
RE: jetdirect log files 2007-01-04
Bobby Smathers (bsmathers reypd com)
If logging is to be enabled via either through JetDirect (which
basically just turns the printer into a Print Server) which can be setup
to log to a computer using the syslog protocol (usually the UDP = User
Datagram Protocol and possibly TCP/IP as well) configured by the
JetAdmin software installed

[ more ]  [ reply ]
RE: Physically damaged SD card 2007-01-04
Bobby Smathers (bsmathers reypd com)
It sounds like, since there is physical damage, the PCBA (Printed
Circuit Board Assembly) contacts aren't making good connections anymore.
Your intermittence at getting it to read every now and then sort of
maybe says that the file system is still in tact and therefore may not
need recovered by soft

[ more ]  [ reply ]
RE: Physically damaged SD card 2007-01-04
Steven Hay (shay communitysavings ca)
I would recommend ZAR - Zero Assumption Recovery. We've used it both
for HDD's and SD cards and it's worked very well for both.

http://www.z-a-recovery.com/digital-image-recovery.htm

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
On Behalf Of

[ more ]  [ reply ]
(Page 8 of 84)  < Prev  3 4 5 6 7 8 9 10 11 12 13  Next >


 

Privacy Statement
Copyright 2010, SecurityFocus