Toolkit
Story: Expert undermines hacking suspect's defence
Posted by: Anonymous (Friday 10 October 2003, 3:23 AM)
Fire this expert.
THe log file would not be fractured if
1) the log file got shorter, or
2) the device file was edited.
Besides, windows protects its event logger.
The log file can only be modified by
editing the disk, there would be no trace.
Full Talkback thread
Story: Expert undermines hacking suspect's defence
-
Fire this expert.
THe log file would not be fractu... Anonymous -
Windows doesn't do nearly enough to "protect" sysl... Anonymous -
Surely any image taken from a hard drive would be... Anonymous
-
A true sector-level disk image, with no "dead-spac... Anonymous
-
Did the examiners:
- mount the original disk on... Anonymous
