Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Forensic tool to recommend?

Subject: Re: Forensic tool to recommend?
Date: Wed, 30 May 2007 14:58:29 -0500
Biggest issue I've noticed here, is that Helix does not recognize SATA cdroms. Booting from such, you get a limited read-only usage.

----- Original Message ----- From: "Richard Lane" <lane.security@gmail.com>
To: <security-basics@securityfocus.com>
Sent: Wednesday, May 30, 2007 7:55 AM
Subject: Re: Forensic tool to recommend?




I recommend the HELIX LiveCD distro. It has both Windows and Linux "sides"
- booting from cold will give access to the Linux toolset, however loading
the CD in Windows provides access to a variety of Windows tools.

http://www.e-fense.com/helix/

Good luck

Richard



From: Fabio Cerullo <fcerullo_at_gmail.com>
Date: Tue, 29 May 2007 07:53:28 +0100

Hi All,
I am evaluating some tools for gathering evidence in Linux and Windows
distros.
In particular I am interested in recovering files/folders which have
been deleted "accidentally" from the PC.
I am aware there are some Live CD's with Linux installed that could
mount a drive and try to recover those files but don't know anyone in
particular.
Any help will be really appreciated.
Thank you very much.
Greetings,
Fabio



<Prev in Thread] Current Thread [Next in Thread>