dataforensicnerd - Slashdot User

Comment Not Possible (Score 1) 269

by dataforensicnerd on Thursday November 10, 2005 @03:21PM (#14000426) Attached to: State Department Developing Cyber Toolkit

This is not possible. Even with the most stealthy data forensic tools, when conducting a live acquisition there is still a trace on the system. Weather in RAM or on the HDD there will be a trace, one would just need to know what to look for. When conducting an acquisition of a media that is powered off, thats another story.

« Newer Older »

Slashdot Top Deals

"Most of us, when all is said and done, like what we like and make up reasons for it afterwards." -- Soren F. Petersen