Friam

Digital forensics

Classic

List

Threaded

1 message

Tom Johnson

Digital forensics

Russ Standish wrote:

"Using Linux, you can just mount the Mac's hard drive, and use unix
tools to investigate those files that were touched in the time span of
interest. To be really sure, you should clone the drive first (eg
using the Linux dd command) so that you don't accidently destroy any
evidence in your poking around (you work with just the copy)."

Do we have any digital forensics shops in ABQ or NM?

TJ

============================================
Tom Johnson - [hidden email]
Institute for Analytic Journalism -- Santa Fe, NM USA
505.577.6482(c) 505.473.9646(h)
NM Foundation for Open Government
Check out It's The People's Data

============================================

Virus-free. www.avast.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
archives back to 2003: http://friam.471366.n2.nabble.com/
FRIAM-COMIC http://friam-comic.blogspot.com/ by Dr. Strangelove