- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message
re: Any computer forensics gurus out there?
Posted on 11/28/14 at 10:27 pm to Powerman
Posted on 11/28/14 at 10:27 pm to Powerman
quote:
and someone has wiped it clean.
A drive is never truly wiped clean after one format. You really gotta do it several times until the binary is FUBAR to the computer so it's much harder to recover.
1
Posted on 11/29/14 at 6:12 am to blue_morrison
Lol thats wrong. Formatting a driven does not delete data.
The metadata of the files may show the user SID associated with the last modified time. If he just formatted the drive though you would need to analyze the computer it was done from. Should be able to correlate some events...
The metadata of the files may show the user SID associated with the last modified time. If he just formatted the drive though you would need to analyze the computer it was done from. Should be able to correlate some events...
This post was edited on 11/29/14 at 6:15 am
Page 1 of 1
Popular
Back to top
Follow TigerDroppings for LSU Football News