[brlug-general] forensics question: retrieving deleted data

2006-05-21 Thread Shannon Roddy
but I'm not sure. Get your hands on a copy of this book: http://www.bookpool.com/sm/0321268172 I have a copy, but in the middle of reading currently. If you want to eyeball it sometime let me know. Shannon -- next part -- An HTML attachment was scrubbed... URL: ht

[brlug-general] forensics question: retrieving deleted data

2006-05-21 Thread David Smith
Will makes good points. Data recovery and forensics are not really synonymous. Data can indeed be recovered forensically if it's needed for legal purposes. The main idea is that you don’t want to alter the data in any way from the time the computer or media is seized. There are software and hardwar

[brlug-general] forensics question: retrieving deleted data

2006-05-21 Thread Will Lowe
John, As I understand, .. Well, first lets set some foundation here. I work in law enforcement. "Computer forensics" means one thing to me but what you are describing is something else. It could be useful in forensic analysis of a computer. It's only a small part. Forensic deals with the appli

[brlug-general] forensics question: retrieving deleted data

2006-05-21 Thread David Smith
John, There's a software suite called EnCase Forensic that is pretty much the industry standard for forensically examining digital media. It's what we used at the A.G's Office. Sybex published a study guide for the certification exam just last month. As far as I know, it's the first EnCase study g

[brlug-general] forensics question: retrieving deleted data

2006-05-21 Thread John Hebert
Howdy, I'd like to learn more about computer forensics. I've read a little bit on it via Google, etc, but I'd like to learn more. I know from personal experience that the best way to learn something (for me, at least. YMMV) is to create a project with an achievable short-term goal. So, I'd like t