• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

IMAGE and Drivespy

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Computer Forensics and Incident Response

View previous topic :: View next topic  
Author Message
kpsrinivasan
Just Arrived
Just Arrived


Joined: 04 May 2004
Posts: 0
Location: India

Offline

PostPosted: Thu May 20, 2004 9:13 pm    Post subject: IMAGE and Drivespy Reply with quote

Hi all,

I am an absolute newbie to the field of forensic. I am just begining to work towards a certification the CHFI from EC Council. ANd at the very starting, as I am trying to create images using the IMAGE and Drivespy tools from Digital Intelligence, I get a program terminated error, saying the Image.ini and the Drivespy.ini respectively. Anybody have any idea , how to fix this error.

And secondly what would be the best way to gain more knowledge in this field..where should i start my quest? ANy good sources or links?
Back to top
View user's profile Send private message MSN Messenger
sonic314
Just Arrived
Just Arrived


Joined: 22 May 2004
Posts: 0


Offline

PostPosted: Sat May 22, 2004 2:24 pm    Post subject: Reply with quote

I'm a newbie myself so I can't help you with the first question.

For the second question I can point you to this thread.
Back to top
View user's profile Send private message
stitch
Just Arrived
Just Arrived


Joined: 17 Apr 2004
Posts: 0
Location: Stitch Island, Singapore

Offline

PostPosted: Sun May 23, 2004 7:08 am    Post subject: re: Reply with quote

r u using the tools from the cd provided by EC???? if yes..there is missing file in it. Arrow
Back to top
View user's profile Send private message Send e-mail MSN Messenger
kpsrinivasan
Just Arrived
Just Arrived


Joined: 04 May 2004
Posts: 0
Location: India

Offline

PostPosted: Mon May 24, 2004 8:09 am    Post subject: Reply with quote

Yes. I am using the tools from the EC Council CD. So is there any other solution for it. Or where else can I find the files?

Regards
Srinivasan
Back to top
View user's profile Send private message MSN Messenger
stitch
Just Arrived
Just Arrived


Joined: 17 Apr 2004
Posts: 0
Location: Stitch Island, Singapore

Offline

PostPosted: Tue May 25, 2004 10:46 am    Post subject: re: Reply with quote

hi, will upload to a server for you to download. Laughing
Back to top
View user's profile Send private message Send e-mail MSN Messenger
kpsrinivasan
Just Arrived
Just Arrived


Joined: 04 May 2004
Posts: 0
Location: India

Offline

PostPosted: Tue May 25, 2004 10:56 am    Post subject: Reply with quote

Thank you stitch...Will wait for your mail Very Happy
Back to top
View user's profile Send private message MSN Messenger
stitch
Just Arrived
Just Arrived


Joined: 17 Apr 2004
Posts: 0
Location: Stitch Island, Singapore

Offline

PostPosted: Wed May 26, 2004 4:17 pm    Post subject: re: Reply with quote

kpsrinivasan,

i drop u a PM. read the PM and you will be able to download the file. Smile
Back to top
View user's profile Send private message Send e-mail MSN Messenger
infosys_sec
Just Arrived
Just Arrived


Joined: 28 May 2004
Posts: 0


Offline

PostPosted: Fri May 28, 2004 6:41 pm    Post subject: Encase Reply with quote

Sure, EnCase is tried and true in the US Courts, but that does not mean that forensic examiner will be!

You need the right skills and the right person doing the investigation!
Back to top
View user's profile Send private message
channan
Just Arrived
Just Arrived


Joined: 10 Jul 2004
Posts: 0


Offline

PostPosted: Sun Jul 11, 2004 10:04 am    Post subject: Re: re: Reply with quote

stitch wrote:
kpsrinivasan,

i drop u a PM. read the PM and you will be able to download the file. Smile


Hi Stich, kpsrinivasan & everyone,

I just ordered the CHFI set. It looks good and seems like a lot of works to do. Does anyone like to form a private study group to prepare for this cert?
Cheers.
Back to top
View user's profile Send private message
kylemaxwell
Just Arrived
Just Arrived


Joined: 24 Sep 2003
Posts: 0


Offline

PostPosted: Tue Jul 13, 2004 10:10 pm    Post subject: Reply with quote

mpkn3rd wrote:
I just came from a security seminar and the only totally certified software package that is not disputed in US courst is Encase. Quite a package, and their website has a lot of good information as well.

http://www.guidancesoftware.com/


I've used Encase extensively, and I've been to their training and to training on other tools as well. The tool is far less important than the investigator -- can he testify to the accuracy of the results? Guidance likes to throw around that they're "certified" for the courts, but that's highly misleading: it's just that their validity hasn't been questioned. But it's not true that they're the only valid tools to use; I know for certain that the US Gov't uses a multitude of tools, including but not limited to Encase, and there are lots of 'em out there. Personally, I like http://www.sleuthkit.org/ even more, as long as you know what you're doing.
Back to top
View user's profile Send private message Visit poster's website Yahoo Messenger
markg
Just Arrived
Just Arrived


Joined: 28 Mar 2008
Posts: 0


Offline

PostPosted: Fri Mar 28, 2008 10:51 am    Post subject: Drivespy.ini Reply with quote

hi stitch can you provide me with the link so that i also can download drivespy.ini pls? thanks
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Computer Forensics and Incident Response All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register