Notifications
Clear all

Webmail forensics

20 Posts
14 Users
0 Likes
1,420 Views
(@rich2005)
Posts: 536
Honorable Member
 

If you offer a discount universally, its not really a discount is it, more 'the price' P

 
Posted : 16/02/2010 9:51 pm
(@seanmcl)
Posts: 700
Honorable Member
 

I guess it's not wanting to take as much money from the taxpayer, but what surprised me more is that they publish the LEO rate, but don't publish the private rate.

Which often means "it depends" though I can't say it does in this case. I have seen a couple of firms adjust prices on the basis of the size of the purchasing business.

I offer a consulting discount to government whether it's for a LEO or the public defender's office because I think that the taxpayer deserves a break.

Then you might be interested to know that according to the Bureau of Economic Analysis, benefits are roughly 34% of the total budget for Federal salaries. From 2002 to 2008, average Federal compensation went up 57% in contrast to the 31% gains in the private sector.

I agree that the taxpayer needs a break. But from whom, is my question.
It seems to me that small business is taking it on the chin right now.

I also note that GSA schedules for some major digital forensics firms are, in some cases, way below their private sector rates so I guess that this is a common practice.

Note that I am not criticizing the decision to offer discounts to specific classes of clients, but there is a risk. In a case that I had, recently, the opposing counsel asked not only my rates on the case at hand, but also what I had charged other clients. He was attempting to suggest that I had discounted my rates for my client because of bias.

 
Posted : 16/02/2010 10:17 pm
CFEx
 CFEx
(@cfex)
Posts: 69
Trusted Member
Topic starter
 

CFEx,

Check out Cacheback which is turning out to be an excellent investigative tool. Even better than Netanalysis now as it can parse most major browsers and crucially (in your case) can reconstruct pages from the cache and provide thumbnails of those pages. It seems it can do this even in cases where EnCase and Netanalysis can't.

Paul

I checked both gmailparser and Cacheback. Cacheback seems to be excellent for reconstructing regular web pages. The best it could do with gmail was to parse it and give me the "text" version of the webmail, which is not bad. Although I can right click on the mail[n].htm file and read the message (without carving out). I also noticed that even though Cacheback disables scripts (in web pages), after trying to rebuild the gmail, it attempts to launch "gmail", the application, specifically, the gmail login page. Somehow, that scripts is not disabled by Cacheback (reason why gmailparser may not have worked).

Thank you all for your input.

 
Posted : 17/02/2010 11:11 pm
bshavers
(@bshavers)
Posts: 210
Estimable Member
 

I'll be attending a CacheBack training in Seattle this April and will probably write up a little something on it afterward. If anyone else is interested, here is the link

https://fortress.wa.gov/cjtc/www/classes/Advanced_Internet_Forensics_Seattle_040610.pdf

I'm using CacheBack now, like it lots, but I'm sure there are features I'm missing. Definitely worth the price, even without the training.

 
Posted : 18/02/2010 9:47 am
(@forensicakb)
Posts: 316
Reputable Member
 

I'm scared to even think of what a "non LE" person would have to pay for the training.

The training is so high that the link you provided quit working in protest and just says "stopped" now.

 
Posted : 18/02/2010 10:01 am
bshavers
(@bshavers)
Posts: 210
Estimable Member
 

But of course my link was bad, probably too long. Try this one. Check the classes in April https://fortress.wa.gov/cjtc/www/

The price was reduced to $1875 with the software, $1675 without the software. Dates are April 6-8, 2010. Looks like the same price for LE and non-LE. Includes a certification test at the end of the training too.

 
Posted : 18/02/2010 10:47 am
CFEx
 CFEx
(@cfex)
Posts: 69
Trusted Member
Topic starter
 

Does anyone know what the non-LEO pricing for Cacheback is?

 
Posted : 18/02/2010 11:27 pm
CdtDelta
(@cdtdelta)
Posts: 134
Estimable Member
 

The quote they gave me the other day was $499.

 
Posted : 19/02/2010 6:48 am
(@siquest)
Posts: 3
New Member
 

The regular price for CacheBack is $499 USD.

 
Posted : 02/03/2010 3:50 am
Beetle
(@beetle)
Posts: 318
Reputable Member
 

I think the LE break is because LE usually buys multiple copies. I know we usually buy 30 or more at a time.

 
Posted : 02/03/2010 4:52 am
Page 2 / 2
Share: