Ethical Hacking Training at InfoSec Institute

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Computer Forensics Computer-Forensics
[Top] [All Lists]

USB devices with internal memory

Subject: USB devices with internal memory
Date: Mon, 02 Jul 2007 10:43:25 -0700
Greetings to the list -

Lately, I've been working with a few devices that contain internal flash memory for storage. The existing drivers for these devices do not mount them as a drive - in some cases, they seem to use slightly modified USB drivers specifically to keep you from accessing them as such.

For example: digital voice recorders; cameras that contain internal flash memory.

With items like flash memory cards/sticks/drives, as they present themselves as a drive to the Windows OS, they are easily imaged by, say, FTK imager - and it is similarly easy to recover deleted items (or, at the very least, view the contents of the memory space). The devices I've mentioned, while having internal memory that allows one to write files to it, and having USB interfaces, require proprietary drivers and software to access them.

Ideally, I'd love a Windows based solution, but any solution would be welcomed. How do folks handle such devices? Just image what you can (via the propriety software), or have you used other methods?

--
Michael Edwards



<Prev in Thread] Current Thread [Next in Thread>
  • USB devices with internal memory, Michael Edwards <=