I have been asked a question that I am a little unsure of. A client had a CD/DVD burned multiple times. There is data on the disc that was not supposed to get out. The discs are being returned to the client, but the client is wondering if there is a way to tell on the disc from what or where the disc was burned.
Also, I know of a few software programs that you can do some analysis with, but was also wondering if I could get a recommendation.
hmm, well it may have been overcome by more current offerings and technologies, I put together a simple paper on CDR Forensics using Linux a few years ago.
You'll find it here, at the Agile Risk Management LLC website
Here is another question to this. If you have a disc and you see the program used and files on it, then make a copy is the same information, as in program used etc. on the copied disc or does it show the new program used? I am ordering the CD/DVD Forensic book, but would like to see about getting this answered.