Aquisition of Data

From: Rick Ayers (rayersat_private)
Date: Wed Aug 13 2003 - 08:58:02 PDT

Next message: Altheide, Cory B.: "RE: Program to wipe data from disk free space"

Previous message: Jeremiah Cornelius: "Re: Using dd.exe to make forensic images of NTFS drives"
Next in thread: crazytrain: "Re: Aquisition of Data"
Reply: crazytrain: "Re: Aquisition of Data"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello,

I'm currently looking at a forensic product (PDA_Seizure) that allows you to
aquire evidence off both Palm and PPC Platforms.  Two points I would like to
make and see if anyone has any comments.

PDA Seizure will retrieve deleted files from the Palm OS iff the device has
not been synched, but it will not retrieve deleted data/files off of the
Pocket PC device.

On to another topic other than pdd does anyone know of any imaging software
that would allow me to create a link to the Pocket PC device and create a
bit by bit image of the data currently resident.

Thanks for any Comments!
-Rick


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Altheide, Cory B.: "RE: Program to wipe data from disk free space"
Previous message: Jeremiah Cornelius: "Re: Using dd.exe to make forensic images of NTFS drives"
Next in thread: crazytrain: "Re: Aquisition of Data"
Reply: crazytrain: "Re: Aquisition of Data"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Aug 13 2003 - 19:07:10 PDT