Re: NTFS $LOGFILE metafile

From: George M. Garner Jr. <gmgarner(at)erols.com>
Date: Mon Mar 17 2003 - 18:45:23 EST

Harlan,

It looks like I spoke too soon. While the ntbackup command appeared to work at first, the resulting backup file seems to be empty. The shadow copy service should work but I may have to go about it programmatically instead of using ntbackup. I don't suppose there is any way to recall a post from the list? :-)

Regards,

George.

• Original Message ----- From: "George M. Garner Jr." <gmgarner@erols.com> To: "Harlan Carvey" <keydet89@yahoo.com> Cc: <forensics@securityfocus.com> Sent: Monday, March 17, 2003 5:54 PM Subject: Re: NTFS $LOGFILE metafile

> Harlan,
live
> system,
to
> be documented. Maybe they are in the IFS SDK. On Windows XP and .Net
file
> to the a: drive.

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Mon Mar 17 19:57:02 2003