This may sound crazy...but if these devices are mountable as drives and you live in the Windows world, what if you were to use something like Winimage to make an exact bit for bit copy of the device? Not sure on the admissibility of this and this gets to a question I have for the group-- what is required to preserve computer evidence, especially when you conduct a forensic investigation? --Arthur Strutzenberg ------------------------------------------------------ Arthur Strutzenberg Swan Island Networks Inc arthur.strutzenberg@private http://www.swanisland.net (503)-796-7926 (x20) ------------------------------------------------------ -----Original Message----- From: owner-crime@private [mailto:owner-crime@private] On Behalf Of Jim Wood Sent: Thursday, July 31, 2003 6:53 PM To: crime@private Subject: CRIME And finally Thanks you so much to all of you for your help today with my search for MD5 and SHA software. It is great to have a resource like this where everyone is working together for a central cause - ( Kinda communistic huh??) I am looking for advice now on making working copies of media such as thumbdrives, flashdrives, SD cards, etc. I have a process in place that works and is admissible as evidence, but I am open to better techniques / software that would simplify this in the future. JW Jim Wood jwood@private MW Technology Group Inc --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.504 / Virus Database: 302 - Release Date: 7/24/2003
This archive was generated by hypermail 2b30 : Fri Aug 01 2003 - 09:56:07 PDT