Russ Standish wrote:




*"Using Linux, you can just mount the Mac's hard drive, and use unixtools
to investigate those files that were touched in the time span ofinterest.
To be really sure, you should clone the drive first (egusing the Linux dd
command) so that you don't accidently destroy anyevidence in your poking
around (you work with just the copy)."*

Do we have any digital forensics shops in ABQ or NM?
TJ

============================================
Tom Johnson - t...@jtjohnson.com
Institute for Analytic Journalism   --     Santa Fe, NM USA
505.577.6482(c)                                    505.473.9646(h)
*NM Foundation for Open Government* <http://nmfog.org>
*Check out It's The People's Data
<https://www.facebook.com/pages/Its-The-Peoples-Data/1599854626919671>*

============================================

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=icon>
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=link>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com
archives back to 2003: http://friam.471366.n2.nabble.com/
FRIAM-COMIC http://friam-comic.blogspot.com/ by Dr. Strangelove

Reply via email to