Forensics Mode:
(Page 32 of 84)  < Prev  27 28 29 30 31 32 33 34 35 36 37  Next >
NTFS and inodes 2005-03-14
H Carvey (keydet89 yahoo com)


When booting a Windows XP system with a Linux distro, one mounts the NTFS drive and runs a command such as "ls -li". In the output, what does the inode number refer to in the NTFS structure?

Thanks,

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir

[ more ]  [ reply ]
Re: Macintosh wiping (but why) 2005-03-11
Steve (securityfocus delahunty com) (1 replies)
You could donate them minus the drives, taking a big fat magnet to the
drives or whatever other method you want to use to destroy them.

We did once have a local computer training place that services low-income
and high-risk areas of Washington DC come in and wipe the drives under the
watchful eyes

[ more ]  [ reply ]
Re: Macintosh wiping (but why) 2005-03-14
Ivan Krstic (krstic fas harvard edu)
RE: Macintosh wiping 2005-03-09
Greg Kelley (gkelley vestigeltd com)
If you are Wintel and an EnCE, why not wipe using Encase?

Option 2: attach the Mac HDs as slaves to a PC and use Eraser 5.3
(http://www.tolvanen.com/eraser/)

Option 3: attach as many Mac HDs as possible to a PC (that does not have
any disk in it besides those you want to wipe) and create a batch f

[ more ]  [ reply ]
RE: Autopsy vs. FTK 2005-03-09
Cooper, Christopher (Christopher Cooper ed gov)
Also take a look at: http://swish-e.org

Both Swish-e and Glimpse have great on-line documentation, which talks about the switches and plugins. It is as simple as changing a few files to customize your search.

-C...
-----Original Message-----
From: Greg Freemyer [mailto:greg.freemyer (at) gmail (dot) com [email concealed]]
S

[ more ]  [ reply ]
RE: Macintosh wiping 2005-03-09
Altheide, Cory B. (IARC) (AltheideC nv doe gov) (1 replies)
> -----Original Message-----
> From: Shannon.O'Neil [mailto:Shannon.ONeil (at) target (dot) com [email concealed]]
> Sent: Monday, March 07, 2005 11:26 AM
> To: forensics (at) securityfocus (dot) com [email concealed]
> Subject: Macintosh wiping
>
> Perhaps disk wiping and data elimination are the opposite of
> typical discussions on this board, but her

[ more ]  [ reply ]
RE: Macintosh wiping 2005-03-09
JDFulmer dsttechnologies com
RE: Macintosh wiping: Great advice from many sources! 2005-03-09
Shannon.O'Neil (Shannon ONeil target com)
Ross,

I've had a few suggestions for Dban, along with the Terminal functions
on the MAC OS CDROM.

Thanks <to all> for the reply,
Shannon

-----Original Message-----
From: Ross O'Brien [mailto:ross (at) dataway (dot) com [email concealed]]
Sent: Wednesday, March 09, 2005 6:24 AM
To: Shannon.O'Neil
Subject: RE: Macintosh wipin

[ more ]  [ reply ]
CFP: 2005 Digital Forensics Research Workshop (DFRWS 2005) 2005-03-09
Golden G. Richard III, Ph.D. (golden cs uno edu)
The usual apologies for any duplication. Please pass along the
following CFP to any of your colleagues to whom you think it might be
interesting.

----

Call for Papers
The 5th Annual Digital Forensics Research Workshop (DFRWS 2005)

August 17-19, 2005
New Orleans, LA

http

[ more ]  [ reply ]
RE: Macintosh wiping 2005-03-09
Cooper, Christopher (Christopher Cooper ed gov)
http://dban.sourceforge.net/

A PPC version was added to the sourceforge last week.

-----Original Message-----
From: Shannon.O'Neil [mailto:Shannon.ONeil (at) target (dot) com [email concealed]]
Sent: Monday, March 07, 2005 2:26 PM
To: forensics (at) securityfocus (dot) com [email concealed]
Subject: Macintosh wiping

Perhaps disk wiping and data elimina

[ more ]  [ reply ]
RE: Acquiring Large Raids 2005-03-08
Davidoff, Arieh (x1145) (ADavidoff rachlin com) (1 replies)
Howdy,

We use often use Encase in Windows for analysis but Encase DOS has
proved too slow for most acquisitions. The faster solution for server
RAID acquisition is the combination of Linux, dd, netcat, and a
crossover cable. We recently performed a few tests on some older server
equipment (PIII-5

[ more ]  [ reply ]
Re: Acquiring Large Raids 2005-03-09
Dragos Ruiu (dr kyx net)
Macintosh wiping 2005-03-07
Shannon.O'Neil (Shannon ONeil target com) (7 replies)
Perhaps disk wiping and data elimination are the opposite of typical
discussions on this board, but here goes;

Our Creative teams are looking at an opportunity to donate some older
Macs to schools in the area. The IT support for their area is cognizant
of InfoSecurity's requirement to remove corpo

[ more ]  [ reply ]
RE: Macintosh wiping 2005-03-09
Forensics @ TracingEmails (forensics tracingemails com) (2 replies)
Re: Macintosh wiping 2005-03-11
Robert Reed (rreed567 earthlink net)
Re: Macintosh wiping 2005-03-11
Simon Biles (simon biles gmail com)
Re: Macintosh wiping 2005-03-09
Daniel Wittenberg (daniel-wittenberg starken com) (1 replies)
Re: Macintosh wiping (but why) 2005-03-09
Steve (securityfocus delahunty com)
Re: Macintosh wiping 2005-03-09
Dragos Ruiu (dr kyx net)
Re: Macintosh wiping 2005-03-09
Scott Warren (sw shelton org)
Re: Macintosh wiping 2005-03-09
Carsten Eilers (secfocuslists ceilers-it de)
Re: Macintosh wiping 2005-03-09
Matthew Cook (M S Cook lboro ac uk)
Re: Macintosh wiping 2005-03-09
Kurt Seifried (bt seifried org) (1 replies)
Re: Macintosh wiping 2005-03-09
Seann Alexander (seann cogeco ca)
(Page 32 of 84)  < Prev  27 28 29 30 31 32 33 34 35 36 37  Next >


 

Privacy Statement
Copyright 2010, SecurityFocus