very nice!!! thank you tick tock! I'll be dloading it tomorrow and will let you know what I think. If it is good which it sure looks it, I'm sure I can scrounge a couple of dollars up to donate from the guys at work.
Me and the rest of the team are playing with it now. We're really liking it so far!
Great job t1ck_t0ck!
--RuffRidr
very nice!!! thank you tick tock! I'll be dloading it tomorrow and will let you know what I think. If it is good which it sure looks it, I'm sure I can scrounge a couple of dollars up to donate from the guys at work.
I tried the KNOPPIX-STD it works great. I have a re-master at my site called the Penguin Sleuth Kit. You can check it out at:
www.linux-forensics.com
I also posted a validation study that I did on Knoppix. It doesn't look so good for EXT3 and reiser partitions. I have found that mounting read-only on reiser and EXT3 partitions changes the state of the drive. The study is in the publications section of my website and comes on my penguin sleuth CD. There is a link in my download sections that explains what Penguin Sleuth has on it.
A couple of things.
1) Penquin sleuth kit looks great. can't wait to try it out.
2) the Knoppix validation paper is a must read. Everyone even vaguely interested in doing an autopsy on a Linux box using a Linux OS like STD (or PSK or FIRE or....) should read this paper! [www.linux-forensics.com]
3) www.knopix-std.org is down. Bandwidth exceeded. I'm not surprised. My monthly bandwidth allowance was 16 GB and I was using about 25 GB a DAY :).
In the week that I've had the iso posted I've had nearly 600 downloads. Thanks for the support! I'm glad you're finding it useful.
Please bare wth me. I expect to have a mirror on ibiblio soon as well as sourceforge. I'll also be ditching the ghetto ass ISP I've been using. DON'T EVER USE 5gbhosting.com. (I should have known the pricing was too good to be true. I should have done my research. I know better than this...)
At any rate. The site should be back soon. STD is just getting started.
I do have to admit STD is very well organized. I have a quick correction. My Validation Paper is not on My CD yet. I released the first ISO before the paper. I will be including it with next weeks release. I have to do one or two cosmetic changes to Penguin Sleuth (Can you believe i mispelled version) plus add the paper. The paper though is available on my web site for now. The good news is that there has been some work done on figuring out the potential problems and it looks like you will still be able to use the CD's to mount the partitions. You will just have to do it from a command line with certain switches. I am not sure yet on the verdict. I will try to post another paper when the possible solution is figured out. I'll keep you posted.....
Thanks
Ernie Baca
www.linux-forensics.com
LSI 9305-16i SATA SAS 12Gbs RAID Controller PCIe 3.0 x8 IT-Mode 4* 8643 SATA
$229.99
Dell R630 8SFF 2.4Ghz 20-Core 128GB H730 RAID 10GB RJ-45 NIC 2x750W PSU 8x Trays
$455.04
Dell R740XD2 26LFF 3.6Ghz 8-C 768GB H730P MINI RAID 2x10G SFP+ NIC 2x1100W Rails
$3538.08
Dell R740XD2 26LFF 3.6Ghz 8-C 256GB H730P MINI RAID 2x10G SFP+ NIC 2x1100W Rails
$2802.08
Inspur LSI 9300-8i Raid Card 12Gbps HBA HDD Controller High Profile IT MODE
$15.98
LSI MegaRAID 9361-8i 12Gb PCIe 8-Port SAS/SATA RAID 1Gb w/BBU/CacheVault/License
$39.95
Dell PowerEdge RAID Controller HBA330 12Gbs PCIe 3.0 SAS SATA J7TNV Low Profile
$29.00
ORICO Multi Bay RAID Hard Drive Enclosure USB 3.0/ Type-C For 2.5/3.5'' HDD SSDs
$87.99
4 Bay RAID External Hard Drive Enclosure for 2.5/3.5" SATA HDD/SSD
$79.99
Oracle 7332895 LSI MegaRAID 9361-16i 16-PORT 12GB SAS PCIE RAID CONTROLLER
$349.00