RE: Encase and data recovery

From: Andrew Rosen (infoat_private)
Date: Thu Mar 21 2002 - 07:23:52 PST

  • Next message: Mike Shaw: "Re: Encase and data recovery"

    I have completed such a program.
    I would like to ask for someone
    to test this.  It is obvious that
    the resulting file(s) would have
    to be authenticated against the
    originals.
     
     
    Regards -
     
    Andrew Rosen
    ASR Data Acquisition & Analysis, LLC - Austin, Texas
    ====================================================
    Voice: 512-918-9227                  (GMT -6 hrs)
    Fax  : 512-918-9393
    EMail: andrewat_private
    WWW  : http://www.asrdata.com
    ====================================================
    non sunt multiplicanda entia praeter necessitatem
    
    > -----Original Message-----
    > From: Matt Pepe [mailto:mtpepe@code-monks.com]
    > Sent: Monday, March 18, 2002 5:13 PM
    > To: Lee, Robert T.
    > Cc: 'forensicsat_private'
    > Subject: RE: Encase and data recovery
    > 
    [snip]
    > <opinion tag>
    > I vote we lobby Guidance for a tool that can convert their 
    > proprietary file to 
    > a raw image. I have this funny feeling that if they don't 
    > offer it soon, other 
    > forensic processing suites may have the upper hand.
    > </opinion tag>
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Mar 21 2002 - 07:34:32 PST