PDA Forensics

From: Rick Ayers (rayersat_private)
Date: Mon Aug 25 2003 - 06:14:36 PDT

  • Next message: the lepkie: "mounted NTFS image. -- no files seen"

    Hello All,
    
    Has anyone experimented with "Parrot" on the ppc platform to perform a
    memory dump and copy data to CF/SD?
    I am attempted to determine if a file on the ppc platform is deleted it is
    in fact recoverable.  Paraben's PDA Seizure does
    not retreive deleted files on PPC on Palm OS.  Any comments would be much
    appreciated.
    
    -Rick
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Aug 26 2003 - 20:41:45 PDT