Re: Identifying Win2K/XP Encrypted Files

From: Craig Earnshaw <Craig.Earnshaw(at)TheEntrepreneur.Com>
Date: Thu Jan 30 2003 - 09:10:51 EST

  As a general rule of thumb, as long as it's not a *nix box, or an NT or Win2K server, you're usually fine to pull the plug (emphasis on the "usually" - if you do it and all goes wrong don't blame me!!!)

Craig G Earnshaw
Head of Forensic Computing Services
Lee & Allen Consulting Ltd
London - New York - Hong Kong

>>I would actually suggest a different method. If you are tasked to seize

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Thu Jan 30 09:19:09 2003