When performing a forensic examination - I use safeback to image the
suspects hard drive, to insure that there is no way during the
investigation that the drive is written to I use a hardware device that
connects between the drive and the computer which insures there is no
possible way for the drive to be written to.
Encase has a product called DRIVEBLOC. I was wondering if there was a
software solution as well..
Hope this helps out.
Jim
-----Original Message-----
From: owner-crime@private [mailto:owner-crime@private] On Behalf
Of Crispin Cowan
Sent: Saturday, August 09, 2003 2:20 PM
To: Jim Wood
Cc: crime@private
Subject: Re: CRIME Software write blocker????
Jim Wood wrote:
>I know about hardware write blockers, is there a software solution out
>there other than running a linux system?
>
I have no idea what you are talking about. That there have been no
responses might suggest that no one else knows what you are asking for
either. Could you clarify a bit what it is that you want?
Thanks,
Crispin
--
Crispin Cowan, Ph.D. http://immunix.com/~crispin/
Chief Scientist, Immunix http://immunix.com
http://www.immunix.com/shop/
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.507 / Virus Database: 304 - Release Date: 8/4/2003
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.507 / Virus Database: 304 - Release Date: 8/4/2003
This archive was generated by hypermail 2b30 : Sat Aug 09 2003 - 15:06:22 PDT