PaulDotCom mailing list archives

Forensic File Analysis


From: brian.seel at gmail.com (Brian Seel)
Date: Wed, 10 Dec 2008 15:09:22 -0800

You can take a disk image and then use Autopsy to view the files with a web
browser. I just did that in my forensics class and it worked great for me.

2008/12/10 Kevin Shortt <kevin.shortt at gmail.com>

Any free tools out there that will preserve a windows file properties
(access time, creator, etc..) for evidentiary purposes?

Any and all leads/suggestions appreciated.

Thanks..

-Kevin

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20081210/0dffe465/attachment.htm 


Current thread: