IMAGE and Drivespy

Networking/Security Forums -> Computer Forensics and Incident Response

Author: kpsrinivasanLocation: India PostPosted: Thu May 20, 2004 9:13 pm    Post subject: IMAGE and Drivespy
    ----
Hi all,

I am an absolute newbie to the field of forensic. I am just begining to work towards a certification the CHFI from EC Council. ANd at the very starting, as I am trying to create images using the IMAGE and Drivespy tools from Digital Intelligence, I get a program terminated error, saying the Image.ini and the Drivespy.ini respectively. Anybody have any idea , how to fix this error.

And secondly what would be the best way to gain more knowledge in this field..where should i start my quest? ANy good sources or links?

Author: sonic314 PostPosted: Sat May 22, 2004 2:24 pm    Post subject:
    ----
I'm a newbie myself so I can't help you with the first question.

For the second question I can point you to this thread.

Author: stitchLocation: Stitch Island, Singapore PostPosted: Sun May 23, 2004 7:08 am    Post subject: re:
    ----
r u using the tools from the cd provided by EC???? if yes..there is missing file in it. Arrow

Author: kpsrinivasanLocation: India PostPosted: Mon May 24, 2004 8:09 am    Post subject:
    ----
Yes. I am using the tools from the EC Council CD. So is there any other solution for it. Or where else can I find the files?

Regards
Srinivasan

Author: stitchLocation: Stitch Island, Singapore PostPosted: Tue May 25, 2004 10:46 am    Post subject: re:
    ----
hi, will upload to a server for you to download. Laughing

Author: kpsrinivasanLocation: India PostPosted: Tue May 25, 2004 10:56 am    Post subject:
    ----
Thank you stitch...Will wait for your mail Very Happy

Author: stitchLocation: Stitch Island, Singapore PostPosted: Wed May 26, 2004 4:17 pm    Post subject: re:
    ----
kpsrinivasan,

i drop u a PM. read the PM and you will be able to download the file. Smile

Author: infosys_sec PostPosted: Fri May 28, 2004 6:41 pm    Post subject: Encase
    ----
Sure, EnCase is tried and true in the US Courts, but that does not mean that forensic examiner will be!

You need the right skills and the right person doing the investigation!

Author: channan PostPosted: Sun Jul 11, 2004 10:04 am    Post subject: Re: re:
    ----
stitch wrote:
kpsrinivasan,

i drop u a PM. read the PM and you will be able to download the file. Smile


Hi Stich, kpsrinivasan & everyone,

I just ordered the CHFI set. It looks good and seems like a lot of works to do. Does anyone like to form a private study group to prepare for this cert?
Cheers.

Author: kylemaxwell PostPosted: Tue Jul 13, 2004 10:10 pm    Post subject:
    ----
mpkn3rd wrote:
I just came from a security seminar and the only totally certified software package that is not disputed in US courst is Encase. Quite a package, and their website has a lot of good information as well.

http://www.guidancesoftware.com/


I've used Encase extensively, and I've been to their training and to training on other tools as well. The tool is far less important than the investigator -- can he testify to the accuracy of the results? Guidance likes to throw around that they're "certified" for the courts, but that's highly misleading: it's just that their validity hasn't been questioned. But it's not true that they're the only valid tools to use; I know for certain that the US Gov't uses a multitude of tools, including but not limited to Encase, and there are lots of 'em out there. Personally, I like http://www.sleuthkit.org/ even more, as long as you know what you're doing.

Author: markg PostPosted: Fri Mar 28, 2008 10:51 am    Post subject: Drivespy.ini
    ----
hi stitch can you provide me with the link so that i also can download drivespy.ini pls? thanks



Networking/Security Forums -> Computer Forensics and Incident Response


output generated using printer-friendly topic mod, All times are GMT + 2 Hours

Page 1 of 1

Powered by phpBB 2.0.x © 2001 phpBB Group