[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Disk wiping -- An alternate approach?



On Mon, 25 Jan 2010 23:07:57 +0545, Bipin Gautam said:

> It would be intellectual uphill challenge for the EXAMINERS given that
> someone may have to shift 1 terabyte of data (how many bytes?:) mostly
> by HUMAN RESOURCE in hope for a ___ in the haystack..........

You *do* realize that there exist numerous tools to automate this scanning,
so "human resource" means "select the search terms, hit enter, and check back
after lunch".

http://www.microsoft.com/industry/government/solutions/cofee/default.aspx
http://www.guidancesoftware.com/computer-forensics-fraud-investigation-software.htm

That's the sort of stuff your disk will most likely be hit with.  The state
of the art is stuff like "find all erased e-mail from X to Y regarding the
McClellan situation".

Attachment: pgpqXaEbS0doX.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/