add open source forensice tools, including afflib
Posted: Thu Feb 03, 2011 3:50 pm
afflib provides bit-level backup --something essential to do before tinkering with a system after an incident.
by using ubcd, there's no need to transfer the hardisk to a recording station.
Backup storage devices using the target computer, then proceed with forensics and/or recovery.
by using ubcd, there's no need to transfer the hardisk to a recording station.
Backup storage devices using the target computer, then proceed with forensics and/or recovery.