Preview in Encase (or other package) rather than image

From: pat.beardmoreat_private
Date: Tue Jul 03 2001 - 01:42:09 PDT

  • Next message: Craig Earnshaw: "Re: Preview in Encase (or other package) rather than image" 

    Before I give my own opinions, has anyone come across the practice of
previewing a drive and then taking off the relevant files rather than doing
a full image.
Does anyone want to comment on the advantages and disadvantages of this
methodology?

thanks,

Patrick Beardmore


-----------------------------------------------------------------

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Tue Jul 03 2001 - 07:19:52 PDT