RE: CRIME Software write blocker????

From: Steve Hailey (shailey@private)
Date: Sat Aug 09 2003 - 16:24:37 PDT

  • Next message: Matthew Brown: "RE: CRIME Software write blocker????"

    Jim:
    
    I've been using a software write blocker for years now that I have found to
    be effective and reliable.  It's called PDBLOCK.  
    
    http://www.digitalintel.com/pdblock.htm
    
    Regards,
    
    Steve Hailey
    President/CEO CyberSecurity Institute
    
    
    
    
    
    
     -----Original Message-----
    From: 	Jim Wood [mailto:jwood@private] 
    Sent:	Saturday, August 09, 2003 1:57 PM
    To:	'Crispin Cowan'
    Cc:	crime@private
    Subject:	RE: CRIME Software write blocker????
    
    When performing a forensic examination - I use safeback to image the
    suspects hard drive, to insure that there is no way during the
    investigation that the drive is written to I use a hardware device that
    connects between the drive and the computer which insures there is no
    possible way for the drive to be written to.
    
    Encase has a product called DRIVEBLOC.  I was wondering if there was a
    software solution as well..
    
    Hope this helps out.
    
    Jim
    
    -----Original Message-----
    From: owner-crime@private [mailto:owner-crime@private] On Behalf
    Of Crispin Cowan
    Sent: Saturday, August 09, 2003 2:20 PM
    To: Jim Wood
    Cc: crime@private
    Subject: Re: CRIME Software write blocker????
    
    Jim Wood wrote:
    
    >I know about hardware write blockers, is there a software solution out
    >there other than running a linux system?
    >
    I have no idea what you are talking about. That there have been no 
    responses might suggest that no one else knows what you are asking for 
    either. Could you clarify a bit what it is that you want?
    
    Thanks,
        Crispin
    
    -- 
    Crispin Cowan, Ph.D.           http://immunix.com/~crispin/
    Chief Scientist, Immunix       http://immunix.com
                http://www.immunix.com/shop/
    
    
    ---
    Incoming mail is certified Virus Free.
    Checked by AVG anti-virus system (http://www.grisoft.com).
    Version: 6.0.507 / Virus Database: 304 - Release Date: 8/4/2003
     
    
    ---
    Outgoing mail is certified Virus Free.
    Checked by AVG anti-virus system (http://www.grisoft.com).
    Version: 6.0.507 / Virus Database: 304 - Release Date: 8/4/2003
     
    



    This archive was generated by hypermail 2b30 : Sat Aug 09 2003 - 16:34:15 PDT