The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
542 views

Forensics - scan guest OS (WinXP) and files from host OS (Win7 64) using VMWare Player or VirtualBox

I have a Windows XP laptop that was infected with a virus; the virus was removed but network connectivity was jacked up. I boot to Ubuntu from a USB key to move files between the system and the ...
14
votes
1answer
4k views

Where is the serial number of the DVD/CD writer stored on the CD?

I was reading the Wikileaks FAQ (archived here), it says: Many CD and DVD writers will include the serial number of the DVD or CD writer onto the CD/DVDs they write. If the post is ...
1
vote
1answer
332 views

What is the best way to undelete some photos on Linux? Is there any way to use foremost to only recover files that only contain some text?

I accidentaly deleted some digital photos I had recently taken, and I wanted to undelete them. I found out about Foremost, and it allows me to recover jpg files, but will fo that with all of the ...
1
vote
2answers
846 views

hard drive forensics tool for linux

I am looking for an application I used in 2001. It was a curses application that displayed devices or files in hexadecimal format, and allowed searching through them and other functionality. I can't ...
2
votes
5answers
348 views

Looking for a way to image an entire harddrive to an external usb drive

I have a 100GB NTFS-formatted drive, and a 250GB external USb disk. I am thinking of using a live disk, as is described here, except that I will skip the gzip part. ...
6
votes
2answers
2k views

Is it possible to confirm CD was burned on a particular machine?

Is it possible to determine whether a CD was burned by a particular CD/DVD burner? Is there any identifier of that burner that is always written to any disc it burns? This is something I'd like to ...
0
votes
2answers
139 views

Where can I find a complete list of all the logs in the system?

I'd like to learn more about forensic analysis, and I'm trying to do the challenges from Project Honeynet. I need to check the logfiles and find the IP's that connected remotely to the computer. I ...