Re: Forensic tool for hard drive.

[H Carvey <keydet89 () yahoo com>]

In-Reply-To: <20041008114420.39582.qmail () web20423 mail yahoo com>


> What I need specifically is a user friendly tool
> to look for erased files on a hard drive. The
> person doing the search for files is not 
> into Linux...and the machines we want to inquire
> about are Windows XP and W2000 based.

ProDiscover from TechPathways is less expensive than EnCase...

------------------------------------------
Harlan Carvey, CISSP
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://groups.yahoo.com/group/windowsir/

"Meddle not in the affairs of dragons, for
you are crunchy, and good with ketchup."

"The simplicity of this game amuses me. 
Bring me your finest meats and cheeses."
------------------------------------------