tag:blogger.com,1999:blog-9518042.post8308648520274837619..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: StuffUnknownnoreply@blogger.comBlogger11125tag:blogger.com,1999:blog-9518042.post-19244276120248846382012-03-09T09:35:05.129-05:002012-03-09T09:35:05.129-05:00Hi,
I understand totally the problem. You can...Hi,<br /><br />I understand totally the problem. You can't buy drives or other devices just to satisfy each individual demand...I totally agree with that.<br /><br />So my offer was sincerly to give you what you ask by delevering you a esata drive. But i'm not Rockfeller too so I offer the cheaper and better solution in my point of view : a esata dock accepting IDE or SATA drives that can be connected to a esata port on a notebook (with a esata port)...<br /><br />Thanks for your answers anyway :)Thierry13noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-36023369461310402612012-03-09T09:14:18.861-05:002012-03-09T09:14:18.861-05:00It's not that you're not clear...
You sai...It's not that you're not clear...<br /><br />You said that you wanted to see artifacts of eSATA drives. I'm willing to see what artifacts are created, *IF* I have drives to test with. If you send me a dock...where then do I get the drives? <br /><br />What I'm saying is that I don't have the resources to go purchase eSATA drives to do testing for one person. I'm not rich. I can't just go buy drives and devices because one person wants to know what the artifacts look like. Sorry. <br /><br />I'm willing to do the testing, and publish my methodology and results, but I can't afford to go purchase a bunch of devices...therefore, I turn to the community for support.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-32973291596314642992012-03-09T09:10:28.390-05:002012-03-09T09:10:28.390-05:00...you can put any drives in a esata dock and the ......you can put any drives in a esata dock and the artefacts depends of the connections not the drive itself...isnt it ?<br /><br />Thanks for your time.<br /><br />Sorry if i'm not clear.Thierry13noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-4763606233967632802012-03-09T09:03:15.500-05:002012-03-09T09:03:15.500-05:00Understood...but what good would a dock do me? Wo...Understood...but what good would a dock do me? Wouldn't I need the actual devices? The eSATA drives?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-2588832401824041042012-03-09T08:59:59.747-05:002012-03-09T08:59:59.747-05:00I was thinking of external esata hard drives conne...I was thinking of external esata hard drives connected to a system...I believed, maybe i'm wrong, that these kind of devices creates different artefacts when connected than usb Keys/hard drives...Thierry13noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-20941457650307251292012-03-09T08:52:42.290-05:002012-03-09T08:52:42.290-05:00I'm not clear on what a dock would do...how wo...I'm not clear on what a dock would do...how would this allow me to populate the Registry with actual device information?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-16366940951527655602012-03-09T08:45:42.184-05:002012-03-09T08:45:42.184-05:00Hi,
I can send you an external esata dock if tha...Hi, <br /><br />I can send you an external esata dock if that could help...<br /><br />give me an adress and amazon will do the rest...<br /><br />Thanks for your response.<br /><br />Thierry13Thierry13noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-39239065728963439112012-03-09T08:22:07.785-05:002012-03-09T08:22:07.785-05:00Thierry,
Thanks for the suggestions...do you have...Thierry,<br /><br />Thanks for the suggestions...do you have any esata/firewire/PCMCIA devices that I could use for testing?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-84059075702993127912012-03-09T08:08:29.071-05:002012-03-09T08:08:29.071-05:00Hi,
Concerning Windows registry Forensics I will...Hi,<br /><br /><br />Concerning Windows registry Forensics I will be interested in :<br /><br />- more informations about artefacts of esata/firewire/PCMCIA devices connected to the system...<br /><br />- at the end of the book a summary table containing for example :<br />hive - key - short description - page number in the book...<br /><br />It could be very useful when we're searching specific informations on a key or simply searching where to find helpfull datas in a case...<br /><br /><br />Thanks for your blog/books/messages :)<br /><br />Damn I must wait until the end of the month to get WFA 3...travel to France seems to be very long !Thierry13noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-83055003706491160392012-02-26T11:14:49.460-05:002012-02-26T11:14:49.460-05:00Keith,
Thanks for taking the time to write a revi...Keith,<br /><br />Thanks for taking the time to write a review.<br /><br />Honestly, it doesn't matter where you post it. If it's easier to post it to your blog, do that...all I'd ask is that you send me a link.<br /><br />Thanks!H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-57293985541281108922012-02-26T10:33:26.976-05:002012-02-26T10:33:26.976-05:00Harlan,
I was planning on getting a review out to...Harlan,<br /><br />I was planning on getting a review out today of WFA 3. Woul you prefer that review be posted on amazon, my blog, both, or in another location?Keithhttp://www.digital4rensics.comnoreply@blogger.com