Comments on: Episode 413 — First Responder Forensicss, SNES ROM Hackery, Tailing Logs and Unicorns

By: Sc00bz

Sc00bz — Thu, 08 Jan 2009 14:45:13 +0000

Nice choice for beer, Yuengling, don’t worry no one can tell .

By: Chris

Chris — Thu, 04 Dec 2008 23:42:25 +0000

Dave,

If we stressed “forensically sound” too hard I apologize. It’s basically a copy of a copy that gets some VMware configuration files wrapped around it. The .dd image itself isn’t converted to a vmdk, it’s opened read-only.

I don’t think I explained that well enough.

By: dave

dave — Thu, 04 Dec 2008 21:27:29 +0000

Actually, after looking into that product a bit more… they do sort of advertise/consider themselves a forensic utility. “Live View is a tool that allows disk images or physical drives to be booted up in a virtual machine and examined in a forensically sound manner.” – They even mention Encase.

I am not sure I understand what makes this a “forensically sound” VM as opposed to, say, VirtualBox. But the title of your piece was not as odd as it first seemed to me.

By: Cayde

Cayde — Thu, 04 Dec 2008 00:41:59 +0000

Hey don’t be hard on yourselves man, The first echoey part was not too bad, and in fact it’s not annoying at all. Keep up the great work.

By: Chris

Chris — Wed, 03 Dec 2008 17:03:25 +0000

Dave,

You must be a forensics professional. Live View is a simple way to look at an image and interact with it on a user level (basically converting to VMware). It’s not meant to be anything other than a quick look at a copy of a copy. The real forensics is left to professionals using EnCase and other software.

Yes the title may be a little misleading, but it’s very valid.

By: dave

dave — Wed, 03 Dec 2008 02:21:43 +0000

Am I going nuts of is this just a drive image package?

If so, would you review acronis, ghost or drive image xml and call it “forensics”?

By: rakz

rakz — Tue, 02 Dec 2008 16:34:34 +0000

hello darren .. everything is fine .. my bandwidth sucks and there is no download link available for the program .. cant you fix that

By: Dirteh

Dirteh — Sun, 30 Nov 2008 22:15:04 +0000

OMG ANUVA GR8 EPISODE U GUYS TOTALLY FILLED MY TECHNOLUST U GUYS MUST HAV SUM GUD 0DAYZ CARE2SHARE?

By: dr.miljenko

dr.miljenko — Sat, 29 Nov 2008 16:16:30 +0000

great episode, so much fun with those unicorns haha

By: Pedobear

Pedobear — Fri, 28 Nov 2008 20:48:45 +0000

hmm, rules 1&2 spring to mind.
This wasn’t some REALLY bad marketing thing was it ?
That would be so lame.

By: El Di Pablo

El Di Pablo — Thu, 27 Nov 2008 01:03:53 +0000

Darren, you are the mutha friggin’ shiznite! Thanks for the shout out and the link love in the show notes. That is above and beyond anything I could have ever asked for! Your show rocks!

Happy Thanksgiving!