Evidence Dynamics, part deux

From: H C (keydet89at_private)
Date: Fri Nov 30 2001 - 12:12:58 PST

  • Next message: H C: "NTFS artifacts"

    In one of his messages, Eoghan Casey mentioned a book
    located online at http://www.disclosedigital.com/. 
    The first chapter is available in PDF form.  The
    sixteenth page of that document, at the bottom, starts
    a discussion regarding volatile information on the
    systems...processes, network connections, mounted
    filesystems, etc.  It's very interesting reading.  
    
    
    
    __________________________________________________
    Do You Yahoo!?
    Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
    http://geocities.yahoo.com/ps/info1
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Fri Nov 30 2001 - 17:38:38 PST