Streamline Your Dig...
 
Notifications
Clear all

Streamline Your Digital Investigations  

  RSS
Scar
 Scar
(@272)
Member

Please use this topic for discussion of the webinar

Streamline Your Digital Investigations

Presenter Richard Frawley, ADF Solutions

Quote
Posted : 16/01/2017 3:59 pm
thefuf
(@thefuf)
Active Member

Please use this topic for discussion of the webinar

Streamline Your Digital Investigations

Presenter Richard Frawley, ADF Solutions

When performing a boot scan, what live distribution is used to run your tools? What measures were taken to disable the automatic mounting of file systems? What measures were taken to disable the automatic code execution from a suspect drive? Is there a software write blocker present?

ReplyQuote
Posted : 16/01/2017 5:00 pm
PC4N6
(@pc4n6)
New Member

Thank you for your interest in our tools. The operating system used on our Collection Key during a boot scan is forensically sound. It does not automatically mount volumes or allow automatic code execution. We prefer to not discuss technical specifics within a public forum but are happy to assist our customers with this information or others in a private non-disclosure situation.

ReplyQuote
Posted : 18/01/2017 9:58 pm
thefuf
(@thefuf)
Active Member

Thank you for your interest in our tools. The operating system used on our Collection Key during a boot scan is forensically sound. It does not automatically mount volumes or allow automatic code execution. We prefer to not discuss technical specifics within a public forum but are happy to assist our customers with this information or others in a private non-disclosure situation.

Thank you for the reply! I am not interested in your tools anymore.

ReplyQuote
Posted : 19/01/2017 12:19 am
jaclaz
(@jaclaz)
Community Legend

Thank you for your interest in our tools. The operating system used on our Collection Key during a boot scan is forensically sound. It does not automatically mount volumes or allow automatic code execution. We prefer to not discuss technical specifics within a public forum but are happy to assist our customers with this information or others in a private non-disclosure situation.

Thank you for the reply! I am not interested in your tools anymore.

@thefuf
WHY? <- Rhetorical question wink

@PC4N6
Only out of curiosity (and of course only if you can actually disclose this kind of info publicly), what is the plan when (hypothetically) one of your users is standing on the (expert) witness stand (under oath) and is asked how the tool he/she used works?

Just for the record, I was almost flamed for expressing a similar doubt a few years ago
http//www.forensicfocus.com/Forums/viewtopic/t=2488/

jaclaz

ReplyQuote
Posted : 19/01/2017 1:05 am
Share: