Aquisition of Data

From: Rick Ayers <rayers(at)nist.gov>
Date: Wed Aug 13 2003 - 11:58:02 EDT

Hello,

I'm currently looking at a forensic product (PDA_Seizure) that allows you to aquire evidence off both Palm and PPC Platforms. Two points I would like to make and see if anyone has any comments.

PDA Seizure will retrieve deleted files from the Palm OS iff the device has not been synched, but it will not retrieve deleted data/files off of the Pocket PC device.

On to another topic other than pdd does anyone know of any imaging software that would allow me to create a link to the Pocket PC device and create a bit by bit image of the data currently resident.

Thanks for any Comments!
-Rick

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Wed Aug 13 22:07:44 2003