±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36474
New Yesterday: 1 Visitors: 188

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Saving IR data to usb stick

Discussion of forensic workstations, write blockers, bridges, adapters, disk duplicators, storage etc. Strictly no advertising of commercial products, please.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

farrahyde
Member
 

Saving IR data to usb stick

Post Posted: Jul 21, 06 05:25

please point me if this question has been asked before, but here it goes.
Can the output from netstat or pstools commands be saved to a usb stick (via copy and paste) to a named file already on the usb device without changing volitle data on the origional volume?
any input will be appreciated.
_________________
If you're gonna do it, do it well, or not at all. 
 
  

keydet89
Senior Member
 

Re: Saving IR data to usb stick

Post Posted: Jul 21, 06 06:08

> Can the output from netstat or pstools commands be saved to a usb stick
> (via copy and paste) to a named file already on the usb device without
> changing volitle data on the origional volume?

Wow...talk about a mess of a question...no offense!

First, yes, you can add the output of a command to a file easily:

c:\>netstat -ano >> e:\somefile.txt

Use the redirection operator for appending.

Second, volatile data does not exist on volumes...volumes are hard drives. Volatile data exists in memory, and whenever you execute a command, you alter volatile memory, as the program needs to be loaded and run.

I hope that helps...

Harlan  
 
  

farrahyde
Member
 

Re: Saving IR data to usb stick

Post Posted: Jul 21, 06 17:06

leave it to mee to make a mess of things Wink

ty for setting that straight..

Second, volatile data does not exist on volumes...volumes are hard drives. Volatile data exists in memory, and whenever you execute a command, you alter volatile memory, as the program needs to be loaded and run.

and TY for the extended command to take it straight to usb..
c:\>netstat -ano >> e:\somefile.txt

as nice of a program as netcat is...sometimes it's not appropriate to use it for data xfer..

thanks for all your help.
farrah
_________________
If you're gonna do it, do it well, or not at all. 
 
  

keydet89
Senior Member
 

Re: Saving IR data to usb stick

Post Posted: Jul 21, 06 18:11

Yeah, netcat doesn't work in all situations.

I hope that helps you with what you're trying to do.

Also, your profile says "Virginia, South"...if you don't mind me asking, where?

If you want to take this offlist, I'm at keydet89 at yahoo dot com

H  
 

Page 1 of 1