Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Forensics
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Converting an external hard drive enclosure into a write blocker? Nov 26 2007 09:17PM
David Kovar (kovar netcerto com)
Greetings,

First off, use a hardware write blocker if you really want to be
certain nothing is going back to the drive.

Then, you can cover all the bases quite neatly by making multiple
forensic copies of the evidence disk. Allow one to mount "normally".
Mount one with a write blocker. Mount...

[ more ]  





 

Privacy Statement
Copyright 2008, SecurityFocus