Re: Preview in Encase (or other package) rather than image

From: H Carvey (keydet89at_private)
Date: Thu Jul 05 2001 - 05:49:56 PDT

  • Next message: Michael D. Barwise, BSc, IEng, MIIE: "Re: Preview in Encase (or other package) rather than image"

    > Does anyone want to comment on the 
    advantages and disadvantages of this
    > methodology?
    
    As long as the process is thoroughly 
    documented, previewing a system can be very 
    valuable, particularly during incident response 
    investigations.  In companies, previewing a 
    system can be used effectively during incident 
    response, or in cases in which the eventual 
    need to prosecute is either not suspected, or 
    deemed unnecessary.
    
    Previewing can be used to save time and 
    money, but should be done so in accordance 
    with established security policies.
    
    -----------------------------------------------------------------
    
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see:
    
    http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Jul 05 2001 - 09:50:57 PDT