|
Posted by Ansgar -59cobalt- Wiechers on December 7, 2007, 5:26 pm
If you were Registered and logged in, you could reply and use other advanced thread options
goarilla <"kevin DOT paulus AT skynet DOT be"> wrote:
> Ansgar -59cobalt- Wiechers wrote:
>> goarilla <"kevin DOT paulus AT skynet DOT be"> wrote:
>>> Ansgar -59cobalt- Wiechers wrote:
>>>> Ummm... EnCase isn't something you can just buy off every shelf. And
>>>> yes, The tool is very commonly used in forensic examinations.
>>> Corporations can buy it so in my eyes it's off the shelf commercial
>>> software.
>>> i don't care if pc stores don't hold it in store, pc stores also don't
>>> hold suites like 3D Studio Max, eg ...
>>
>> What exactly does that change about the fact that law enforcement
>> agencies actually do use EnCase?
>
> nothing i'm drifting off the subject
> but i really think a few GNU shred's defeats software like that,
Of course. Even a "dd if=/dev/zero of=..." most likely will.
cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich
|