Full Disclosure mailing list archives

Re: Disk wiping -- An alternate approach?


From: Valdis.Kletnieks () vt edu
Date: Mon, 25 Jan 2010 12:50:59 -0500

On Mon, 25 Jan 2010 23:07:57 +0545, Bipin Gautam said:

It would be intellectual uphill challenge for the EXAMINERS given that
someone may have to shift 1 terabyte of data (how many bytes?:) mostly
by HUMAN RESOURCE in hope for a ___ in the haystack..........

You *do* realize that there exist numerous tools to automate this scanning,
so "human resource" means "select the search terms, hit enter, and check back
after lunch".

http://www.microsoft.com/industry/government/solutions/cofee/default.aspx
http://www.guidancesoftware.com/computer-forensics-fraud-investigation-software.htm

That's the sort of stuff your disk will most likely be hit with.  The state
of the art is stuff like "find all erased e-mail from X to Y regarding the
McClellan situation".

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: