Ethical Hacking Training at InfoSec Institute Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Tradeoff's in usage |
|---|---|
| Date: | 26 Jul 2006 21:57:25 -0000 |
Dear Group, I just wanted to know more about the tradeoff's between turing poweroff and booting back the system for forensic analysis, doing the analysis without turning it off. I was thinking about memory based tracks. I mean metasploit is releasing new payloads like MAFIA some of whose modules reside on the memory like SAM Juicer. For those exploits that resides in memory, how can you perform a forensic analysis. If you keep it ON and do an analysis, wont the metasploits function to disable your end input such as the keyboard, mouse or even the stdout being disabled, stop your analysis. I am sorry if the question is stupid or like framed really bad. I was just confused about the tradeoff's in those levels. Kind Regards, Shyaam PS: Sorry if my question was not phrased properly
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Nigilant32 - Free Windows Incident Response Tool based on Sleuthkit - Final Article Released, Jason T. Hallahan |
|---|---|
| Next by Date: | Re: obtaining an image from a damaged SD chip, terrorpost |
| Previous by Thread: | Hardware needed for a complete drive acquisition tool kit and techniques for RAID acquisition, Robertson, Seth (JSC-IM) |
| Indexes: | [Date] [Thread] [Top] [All Lists] |