05May2008 (UTC +8)

And a good morning to you to Cris,

On 5/3/08, Christian Masancay <[EMAIL PROTECTED]> wrote:
> Good morning,
>
>  Hi pluggers, Is there anyone in the forensic field who has experienced
>  any issues on using a Tableau Write Blocker while imaging a suspect
>  hard drive using Helix Distribution (specifically using DCFLDD)?
>
>  Sincerely yours,
>  Cris Masancay

Are you practicing on an old laptop with IDE drives? I didn't get to
figure out what happened to a case of mine a couple of years ago, but
I think there were some electric signaling issues... I remember my
team and I solving that issue by building our own "forensicator"
machine (you may have seen it with the blue lights during a couple of
ISACA Manila events) --which had cables and other tidbits we bought
from Sim Lim in SG, as well as from HK (I forgot the name of HK mall
that is something like SG's Sim Lim)... PC Express isn't very useful
if your computing requirements are not mainstream anymore.

Try a hardware hack and just cut the TX of the IDE cable. You'll get
basically the same results, but without the fancy LED indicator
lights.



Drexx Laggui  -- CISA, CISSP, CFE Associate, ISO27001 LA, CCSI, CSA
http://www.laggui.com  ( Singapore / Manila / California )
Computer forensics; Penetration testing; QMS & ISMS developers; K-Transfer
PGP fingerprint = 6E62 A089 E3EA 1B93 BFB4  8363 FFEC 3976 FF31 8A4E
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph

Reply via email to