Toolkit
Story: Accused port hacker says log files were 'edited'
Posted by: Anonymous (Wednesday 8 October 2003, 10:59 PM)
If the hacker was running as Adminitrator or any account in the Administrators group (not hard to accomplish in this scenario), then editing the logs is hard but not impossible.
Although Windows protects its log files from being edited, it does not adequitely protect device access to the disk upon which they reside (accessed by opening \\.\PHYSICALDRIVE0).
Please remember, hackers do not pass out their best tools.
Full Talkback thread
Story: Accused port hacker says log files were 'edited'
-
To quote the article.
"The defence counsel asked S... Anonymous -
If the hacker was running as Adminitrator or any a... Anonymous -
"It is impossible".
Now, THAT was a very dangerous... Djakson Cleber Gonçalves
-
The comment from the Detective about it being impo... Christopher J. Combs
-
I think that the log files might have been edited.... MHD Yasir Al-lahham
-
There are lots of methods, the person who stated t... Anonymous
-
Aaron is right... this stuff can happen, and the... Sky
-
Has "Inspector" (DC) Stunt *ever* heard of malware... Anonymous
-
Does the UK have the equivalent of an amicus curia... Josh
-
Hmmm I like using "pipe" works in Unix and Windoze... tty21
