Security management Toolkit

Story: Vista will force need for network forensics

• 
• 

Vista Drive Encryption

Of the 4 flavours of Vista currently released, only the Ultimate edition has the Bit Locker functionality enabled. This is an optional element, set up through the control panel and, upon doing so, will create 2 partitions on the hard disk; one for the OS the second for data.
The encryption key will reside on a trusted platform module built in to some motherboards or can be held on a removable USB storage device.

Simon is correct in advocation a network based approach to forensics as this is transparent to the user community and allows the forensic investigators to seize a system at the appropriate time; i.e when the system is live and logged on, thus affording the investigator the ability to seize all component parts of the system (including attached storage media).

Jim Griffiths
Digital Forensics Practitioner

• 
• 

• 
• 
• 

Full Talkback thread