Month: March, 2007

Copying 1s and 0s

21 March, 2007 (12:22) | Digital forensics, Fundamentals | No comments

I’ve been asked a few times over the past weeks about making multiple copies of disk images. Specifically, if I were to make a copy of a copy of a disk image, would the “quality” degrade? The short answer is no. It boils down to the idea of copying information from a [...]

Exhibits from deposition of RIAA’s expert available online

4 March, 2007 (23:29) | Digital forensics | No comments

Updating the previous post, the exhibits from the deposition are available at:
Recording Industry vs The People blog.

Transcript of deposition of RIAA’s expert available online

1 March, 2007 (22:18) | Digital forensics | No comments

In UMG v. Lindor, the RIAA’s expert was deposed on February 23rd 2007. A PDF copy of the transcript is available at ilrweb.com.
Source: Recording Industry vs The People blog.

Planting evidence

1 March, 2007 (13:24) | Digital forensics, Fundamentals | 2 comments

The other day, Dimitris left a comment asking about how to determine if someone has altered the BIOS clock and placed a new file on the file system. In essence, this is “planting evidence”.
So, what might the side effects of this type of activity be? It’s difficult (if not impossible) to give an [...]