View previous topic :: View next topic |
Author |
Message |
kpsrinivasan Just Arrived
Joined: 04 May 2004 Posts: 0 Location: India
|
Posted: Thu May 20, 2004 9:13 pm Post subject: IMAGE and Drivespy |
|
|
Hi all,
I am an absolute newbie to the field of forensic. I am just begining to work towards a certification the CHFI from EC Council. ANd at the very starting, as I am trying to create images using the IMAGE and Drivespy tools from Digital Intelligence, I get a program terminated error, saying the Image.ini and the Drivespy.ini respectively. Anybody have any idea , how to fix this error.
And secondly what would be the best way to gain more knowledge in this field..where should i start my quest? ANy good sources or links?
|
|
Back to top |
|
|
sonic314 Just Arrived
Joined: 22 May 2004 Posts: 0
|
Posted: Sat May 22, 2004 2:24 pm Post subject: |
|
|
I'm a newbie myself so I can't help you with the first question.
For the second question I can point you to this thread.
|
|
Back to top |
|
|
stitch Just Arrived
Joined: 17 Apr 2004 Posts: 0 Location: Stitch Island, Singapore
|
Posted: Sun May 23, 2004 7:08 am Post subject: re: |
|
|
r u using the tools from the cd provided by EC???? if yes..there is missing file in it.
|
|
Back to top |
|
|
kpsrinivasan Just Arrived
Joined: 04 May 2004 Posts: 0 Location: India
|
Posted: Mon May 24, 2004 8:09 am Post subject: |
|
|
Yes. I am using the tools from the EC Council CD. So is there any other solution for it. Or where else can I find the files?
Regards
Srinivasan
|
|
Back to top |
|
|
stitch Just Arrived
Joined: 17 Apr 2004 Posts: 0 Location: Stitch Island, Singapore
|
Posted: Tue May 25, 2004 10:46 am Post subject: re: |
|
|
hi, will upload to a server for you to download.
|
|
Back to top |
|
|
kpsrinivasan Just Arrived
Joined: 04 May 2004 Posts: 0 Location: India
|
Posted: Tue May 25, 2004 10:56 am Post subject: |
|
|
Thank you stitch...Will wait for your mail
|
|
Back to top |
|
|
stitch Just Arrived
Joined: 17 Apr 2004 Posts: 0 Location: Stitch Island, Singapore
|
Posted: Wed May 26, 2004 4:17 pm Post subject: re: |
|
|
kpsrinivasan,
i drop u a PM. read the PM and you will be able to download the file.
|
|
Back to top |
|
|
infosys_sec Just Arrived
Joined: 28 May 2004 Posts: 0
|
Posted: Fri May 28, 2004 6:41 pm Post subject: Encase |
|
|
Sure, EnCase is tried and true in the US Courts, but that does not mean that forensic examiner will be!
You need the right skills and the right person doing the investigation!
|
|
Back to top |
|
|
channan Just Arrived
Joined: 10 Jul 2004 Posts: 0
|
Posted: Sun Jul 11, 2004 10:04 am Post subject: Re: re: |
|
|
stitch wrote: |
kpsrinivasan,
i drop u a PM. read the PM and you will be able to download the file. |
Hi Stich, kpsrinivasan & everyone,
I just ordered the CHFI set. It looks good and seems like a lot of works to do. Does anyone like to form a private study group to prepare for this cert?
Cheers.
|
|
Back to top |
|
|
kylemaxwell Just Arrived
Joined: 24 Sep 2003 Posts: 0
|
Posted: Tue Jul 13, 2004 10:10 pm Post subject: |
|
|
mpkn3rd wrote: |
I just came from a security seminar and the only totally certified software package that is not disputed in US courst is Encase. Quite a package, and their website has a lot of good information as well.
http://www.guidancesoftware.com/ |
I've used Encase extensively, and I've been to their training and to training on other tools as well. The tool is far less important than the investigator -- can he testify to the accuracy of the results? Guidance likes to throw around that they're "certified" for the courts, but that's highly misleading: it's just that their validity hasn't been questioned. But it's not true that they're the only valid tools to use; I know for certain that the US Gov't uses a multitude of tools, including but not limited to Encase, and there are lots of 'em out there. Personally, I like http://www.sleuthkit.org/ even more, as long as you know what you're doing.
|
|
Back to top |
|
|
markg Just Arrived
Joined: 28 Mar 2008 Posts: 0
|
Posted: Fri Mar 28, 2008 10:51 am Post subject: Drivespy.ini |
|
|
hi stitch can you provide me with the link so that i also can download drivespy.ini pls? thanks
|
|
Back to top |
|
|
|