Re: Aquisition of Data

[crazytrain <[EMAIL PROTECTED]>]

Rick

I recommend PDA Seizure.  Nice product, certainly the only one of its
kind currently, and at a nice price.  Amber from Paraben is quite
knowledgeable so I've found tech support and all around questions
resolved/answered quickly and/or completely and coherently.  

Two other notes.  One, the gentleman that wrote pdd has left his work at
@stake and is now working for Paraben, so development of pdd has stopped
and that technology is absorbed into PDA Seizure.

Two, I'm not familiar with any method to create a bit image just yet. 
Most use serial driver, even if USB (I'm speaking about Linux here), and
that poses a problem.

Look into PDA Seizure if you get the opportunity.

regards,

farmerdude


On Wed, 2003-08-13 at 11:58, Rick Ayers wrote:
> Hello,
> 
> I'm currently looking at a forensic product (PDA_Seizure) that allows you to
> aquire evidence off both Palm and PPC Platforms.  Two points I would like to
> make and see if anyone has any comments.
> 
> PDA Seizure will retrieve deleted files from the Palm OS iff the device has
> not been synched, but it will not retrieve deleted data/files off of the
> Pocket PC device.
> 
> On to another topic other than pdd does anyone know of any imaging software
> that would allow me to create a link to the Pocket PC device and create a
> bit by bit image of the data currently resident.
> 
> Thanks for any Comments!
> -Rick
> 
> 
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management 
> and tracking system please see: http://aris.securityfocus.com
> 


-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com