tag:blogger.com,1999:blog-9518042.post115582210220523712..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: Report WritingUnknownnoreply@blogger.comBlogger2125tag:blogger.com,1999:blog-9518042.post-62649160484643309602006-08-23T06:28:00.000-05:002006-08-23T06:28:00.000-05:00Yeah, I wondered about the VA/FBI report, as well,...Yeah, I wondered about the VA/FBI report, as well, but evidently they went over the laptop case, and determined that the screws that hold the hdd in place had not been removed.<br /><br />Also, keep in mind that as far as the media is concerned, "...in all likelihood..." doesn't sound as sexy as "...definitely not..." or "...without a doubt...". Many news papers are written to an 8th grade education level so how the information is actually communicated may be different from what the spokesperson said.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-9518042.post-79108278389601087422006-08-22T23:27:00.000-05:002006-08-22T23:27:00.000-05:00"There are several ways, of varying technical soph..."<i>There are several ways, of varying technical sophistication, that could be used to copy the data from the hard drive without leaving obvious forensic artifacts.</i>"<br /><br />I remember wondering when I heard the news that the VA said that no data had been compromised - and thinking to myself "How do they know someone didn't pull the HD, hook it up to a $100 write blocker, image/ghost/copy all the data out, slap the HD back in, and return the laptop?"<br />How the $&*@! can they be 100% sure that the stolen VA laptop contents aren't being rifled thru at this very moment?<br /><br />I like your comments, tho<br />And will definately have to show it to the noobs when we hire them.Anonymousnoreply@blogger.com