Join Us!

New paper: Analysis...
 
Notifications
Clear all

New paper: Analysis of hidden data in the NTFS file system  

Page 2 / 2
  RSS
Igor_Michailov
(@igor_michailov)
Senior Member

I see

ReplyQuote
Posted : 17/01/2006 1:29 pm
Jamie
(@jamie)
Community Legend

Oh, hang on, I think I know what the problem is šŸ˜‰

Jamie

ReplyQuote
Posted : 17/01/2006 4:23 pm
fatrabbit
(@fatrabbit)
Active Member

What, you think the little guy in the picture has hidden the image file? He does look a little suspicious.

Or does the image not exist in the /images/other directory?

ReplyQuote
Posted : 17/01/2006 5:19 pm
Jamie
(@jamie)
Community Legend

OK, this little mystery should now be solvedā€¦

Originally I was going to add the tables as images but in the end just used HTML. However, I forgot to remove the IMG SRC statements I'd already included in the body of the text.

oops

I had assumed that those who stated they couldn't see the images were talking about ALL the images but I suspect they were seeing some (i.e. fig1.gif, fig2.gif, etc.) but not the "missing" table graphics.

I've now removed the superfluous IMG SRC lines, does everthing look good to everyone now?!!

Jamie

ReplyQuote
Posted : 17/01/2006 6:52 pm
bjgleas
(@bjgleas)
Active Member

That appears to have done the trickā€¦ So the stuff was there all along, we just thought there was something missing because of the broken linksā€¦

But it would still be nice to see this paper in PDF, or printer friendly format.

thanks,

bj

ReplyQuote
Posted : 17/01/2006 7:13 pm
keydet89
(@keydet89)
Community Legend

I think it's great that some of my work was referencedā€¦although more is available WRT NTFS alternate data streams.

I just wish that the author had gotten my first initial correct.

Filed under "B", for "Harlan"

ReplyQuote
Posted : 17/01/2006 9:03 pm
Jamie
(@jamie)
Community Legend

I've corrected that error now.

Jamie

ReplyQuote
Posted : 17/01/2006 9:39 pm
itcentral
(@itcentral)
New Member

i've created a PDF if anyone wants a copy

paul

ReplyQuote
Posted : 18/01/2006 7:04 am
Jamie
(@jamie)
Community Legend

Oh, that's very useful, I had emailed the author to see if he already had one but if you've got one available feel free to mail it to me if you wish and I'll add it to the articles index as an alternative to viewing the HTML.

Cheers,

Jamie

ReplyQuote
Posted : 18/01/2006 7:50 am
Jamie
(@jamie)
Community Legend

I'm sure there's a joke here somewhere ("How many forensic computing practitioners does it take to find a missing imageā€¦") šŸ˜‰

Just a quick note, the PDF is now available at http//www.forensicfocus.com/downloads/ntfs-hidden-data-analysis.pdf and linked to from the papers page.

Thanks to Kai Wee and Paul for both supplying the file.

Cheers,

Jamie

ReplyQuote
Posted : 31/01/2006 9:10 pm
farrahyde
(@farrahyde)
New Member

Thanks to the person who posted this VERY informative and helpful indeed

ReplyQuote
Posted : 27/02/2006 6:40 pm
Unforgiven
(@unforgiven)
New Member

A very nice read, thanks!

ReplyQuote
Posted : 03/04/2006 6:39 pm
robrowald
(@robrowald)
New Member

I liked it. Excellent information

ReplyQuote
Posted : 07/04/2006 5:24 pm
mazppsa
(@mazppsa)
New Member

Hi everybody, 8)

Thanks a lotā€¦ very new to computer forensic. i believe this article will broaden my view when dealing with a pc. šŸ˜Æ

Thanks again.

Note my first postā€¦. )

ReplyQuote
Posted : 11/04/2006 9:17 pm
formp
(@formp)
New Member

i can see too
thank u

ReplyQuote
Posted : 15/04/2006 4:52 pm
Page 2 / 2
Share: