forensics-ownerat_private

From: Jim Persinger (jimat_private)
Date: Mon Oct 21 2002 - 15:30:03 PDT

  • Next message: Douglas K. Fischer: "RE: Future trends in computer forensics"

    Greetings -
    
    I'm looking for a method to look at a HD and be able to tell what and when
    (any named file) was copied to either a floppy drive or burned to CD. It
    would be helpful to if I could tell the machine was hooked up in a network
    and files were copied from the target machine to another machine.
    
    Most machines will target Win95,98,NT4,ME,W2K,XP and the CD burning software
    may be Nero.
    
    I'm not in need to recover any file, but I need to gain the 'history' as
    far back as to when the OS was installed.
    
    Thanks
    
    Jim
    PM Investigations, Inc.
    www.pminvestigations.com
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Oct 21 2002 - 17:16:15 PDT