Forums
Main Category
General (Technical,...
USB
 
Notifications
Clear all

USB

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by dsacilowski 21 years ago
3 Posts
2 Users
0 Reactions
1,546 Views
RSS
 dsacilowski
(@dsacilowski)
New Member
Joined: 21 years ago
Posts: 2
Topic starter 25/10/2004 8:50 pm  

What do people currently use to acquire data from a USB device in a forensically sounds manner? I'm having trouble getting OSs to mount these devices read only so I need a solid way of doing this.
Thanks!


   
Quote
 gmarshall139
(@gmarshall139)
Reputable Member
Joined: 21 years ago
Posts: 378
26/10/2004 4:45 am  

If you use Encase there is a boot disk image available from their website that has USB drivers. Getting it to work is hit and miss depending on your USB drivers and the device you are trying to read.

The registry hack (for windows xp sp2) described here ( http://www.sanx.org/tipShow.asp?articleRef=252 ) will effectively make your USB ports read only. It has been verified, but you would want to verify it for yourself as well.


   
ReplyQuote
 dsacilowski
(@dsacilowski)
New Member
Joined: 21 years ago
Posts: 2
Topic starter 26/10/2004 11:06 pm  

Thank you, Greg. I tested the windows option thoroughly and am satistied with the data's integrity.
I appreciate the help!


   
ReplyQuote
Forum Jump:
  Previous Topic
Next Topic  
Share: