|
|
 |
|
| List of Capabilities |
Email
Files
Server
Other OS's / Media
Email
Deleted email files - outlook, outlook express, internet emails
(Rarely, subject to the computer not being used at all after the
incident.)
Deleted emails from email archives - possible through keyword search
(subject to the extent of the computer being used after the deletion).
All metadata associated with emails such as sender, receiver, date
sent, etc.
return to top
All Files
Existing file listing with metadata.
Deleted files scavenge (if not overwritten by any means such as,
but not limited to windows re-install) with metadata reflecting
dates created and modified (not necissarily date deleted).
Keyword searches at binary level - look for partial information
which scavenge will not capture. - apart from data contained within
compressed files.
Chat sessions have a change, albeit small, of being recovered subject
to the extent of the computer having been used after the incident.
Pornography - all picture files, existing or deleted.
Internet History, showing websites visited along with dates and
times.
It is possible to be able to infer the time and date of usage of
a computer system, along with the user accound used.
Search for hacking software.
Search for viruses.
Usage of file sharing software, e.g. Kazaa, Morpheus, Bearshare etc.
return to top
Server
RAID
Exchange database emails.
return to top
Other Operating Systems / Media
All OS can be foresically examined, once we have an image then we
can use all of our proprietary tools along with Encase.
Mac OS
Linux
Palm OS / Palm Pilot
Floppy disks
CD's / DVDs
Zip cartridges, Jazz cartridges
Non-functional hard drives
Tapes
Cell Phones
PDA
Blackberries
return to top |
|
|
