导航

08 2012 档案

摘要:E-discovery: 4 scenarios that call for computer forensics Computer forensics can recover hard-to-reach data, but is sometimes risky and expensive BY STEVEN HUNTER August 21, 2012 A working know... 阅读全文

posted @ 2012-08-29 09:00 YiDiscovery 阅读(249) 评论(0) 推荐(0)

摘要:近日,计算机取证硬件厂商Tableau发布了目前市场上功能最为全面的一体化只读接口T35689iu Forensic Bridge。T35689iu具备SAS、SATA、FireWire、USB 3.0以及IDE等多种只读接口,与主机连接采用USB 3.0及火线(可选)接口。 阅读全文

posted @ 2012-08-28 11:40 YiDiscovery 阅读(1168) 评论(0) 推荐(0)

摘要:原文跳转:http://www.computerworld.com/s/article/9230361/How_police_tracked_down_Steve_Jobs_stolen_iPads?taxonomyId=13&pageNumber=1IDG News Service -The digital breadcrumbs left behind when people use Internet-connected gadgets are what led California investigators to recover iMacs, iPads and other i 阅读全文

posted @ 2012-08-21 00:43 YiDiscovery 阅读(290) 评论(0) 推荐(0)

摘要:近日,美国第六巡回上诉法院法官宣称,针对手机发射出的信号进行追踪可以认为类似于监视一个人在公共场所活动(if a device emits a trackable signal, following their location is similar to watching someone move about in a public space.),这样的表述可以认为是对于手机信号进行合法追踪的认可。更多跳转:http://www.policeone.com/police-products/police-technology/gps/articles/5916070-Appeals-cour 阅读全文

posted @ 2012-08-20 13:01 YiDiscovery 阅读(253) 评论(0) 推荐(0)

摘要:近期没有怎么更新博客,主要是杂事较多无暇顾及,今天得闲,把近期在PGP上“阴沟翻船”的两件事记个流水账。事件1:操作系统为Windows 7 x64,对于系统磁盘进行了WDE全盘加密,方式为Passphrase,笔记本T410i,一直觉得原配500G不够用,于是买来一块光驱位磁盘架,另行安装一块500G,同样WDE加密,7月某日,闲来无事,突发奇想,将盘架500G磁盘拆下,替换为另一块硬盘计划安装Windows 8,由于都是HITACHI磁盘,在进行操作系统安装过程中不慎选择了笔记本原装硬盘的100M Windows 7系统分区,待发现开始安装已晚,强制停止安装,拆下系统盘,挂载另一台计算机, 阅读全文

posted @ 2012-08-18 22:33 YiDiscovery 阅读(1428) 评论(4) 推荐(0)