RE: Digital Evidence Question - What is an effective Windows hard -disk search tool?

[Gene LeDuc <Gene.LeDuc () tns-md com>]

Since all you did was copy/paste from the web site, I think it's fair to ask
what your experience with this product has been.

-----Original Message-----
From: dave () netmedic net [mailto:dave () netmedic net]
Sent: Thursday, June 19, 2003 4:30 PM
To: 'Wilcox, Stephen'; 'Ansgar Wiechers';
security-basics () securityfocus com
Cc: bugtraq () planetcobalt net
Subject: RE: Digital Evidence Question - What is an effective Windows
hard -disk search tool?


http://www.r-tt.com/RStudio.shtml

Host OS: Win9x, ME, NT, 2000, XP. 
Remote data recovery over network. Data can be recovered on network
computers running Win95/98/ME/NT/2000/XP, Linux, UNIX.
Supported file systems: FAT12, FAT16, FAT32, NTFS, NTFS5(created or updated
by Win2000), Ext2FS (Linux).
Recognition and parsing Dynamic (Windows 2000/XP), Basic and BSD (UNIX)
partitions layout schema.
Damaged RAID reconstruction. If OS cannot recognize your RAID, you can
create a virtual RAID from its components. Such virtual RAID can be
processed like a real one.
Creates IMAGE FILES for an entire DISK, PARTITION or its part. Such image
files can be processed like regular disks.
Recovers files on damaged or deleted partitions, encrypted files (NTFS 5),
alternative data streams (NTFS, NTFS 5). 
Recovering data if:  FDISK or other disk utilities have been run;
VIRUS has invaded; FAT is damaged; MBR is destroyed. 
Recognizes localized names. 
Recovered files can be saved on any (including network) disks accessible by
the host operating system.
File or disk content can be viewed and edited in the hexadecimal editor. The
editor supports NTFS file attribute editing.



Without a doubt the best bang for your buck.


 
_____________________
Dave Kleiman
dave () netmedic net
www.netmedic.net


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------