Toolkit
Story: Expert undermines hacking suspect's defence
Posted by: Anonymous (Friday 10 October 2003, 12:02 PM)
Surely any image taken from a hard drive would be subject to defragmentation as part of the imaging process? Is the actual drive still available for examination?
Full Talkback thread
Story: Expert undermines hacking suspect's defence
-
Fire this expert.
THe log file would not be fractu... Anonymous -
Windows doesn't do nearly enough to "protect" sysl... Anonymous
-
Surely any image taken from a hard drive would be... Anonymous -
A true sector-level disk image, with no "dead-spac... Anonymous
-
Did the examiners:
- mount the original disk on... Anonymous
