Forensic Ideas Google Group

Free Advanced Hard Drive Cloning Software From Clonezilla

dtab...@gmail.com (dtabone) — Mon, 28 Sep 2009 13:23:32 UT

Clonezilla is free hard drive cloning software for taking a snapshot
of a system and reverting back to it later as a backup or to get
things the way you once liked them.

Full article.. [link]

Re: Help

maxime.spam...@gmail.com (Max) — Wed, 05 Aug 2009 09:00:55 UT

Look this up (Tor network)

[link]

Help

exsesiv...@sbcglobal.net (OC) — Wed, 05 Aug 2009 04:41:59 UT

I'm not sure if this is 100% possible but I would like to take a
dynamic IP address and identify it as being generated on a server that
only services a certain area. I used to work for a telephony company
and we could do that with long distance calls tracing the trunks they
use to go back to the orginal PED. I need to be able to trace a known

Hi All

christ...@mycash2u.info — Thu, 18 Jun 2009 12:16:29 UT

Hey All,
I have recently joined this group. How is everyone?
Thanks

RE: Why EFS is not a good idea (was Re: IP tracking software)

ste...@engelbert.de (Stefan Engelbert) — Fri, 08 May 2009 10:06:06 UT

Hi,

thanks for the deteailed list :-)

I agree with the keys stored on the computer. In fact software certificates
are always a theoretical risk. That's why smartcards should be used.

Regarding Network transfers, temp files etc. That I do have to agree. In
fact when using EFS such points have to be considered.

Why EFS is not a good idea (was Re: IP tracking software)

pullic...@gmail.com (Jeremy Pullicino) — Fri, 08 May 2009 09:56:53 UT

EFS is inherently flawed...

- EFS keys are stored on the computer, with physical access to the system
the enemy can retrieve them and decrypt the files
- EFS keys are automatically loaded and used when the user logs on; with
physcial access retrieving the login password is trivial, so th enemy can

RE: IP tracking software

ste...@engelbert.de (Stefan Engelbert) — Thu, 07 May 2009 16:28:27 UT

Why is EFS not a good idea?

On Behalf Of Jeremy Pullicino
Sent: Thursday, May 07, 2009 4:14 PM
To: ForensicIdeas@googlegroups.com

Hi,

My 2 euro cents worth...

These methods assume you have physical access to the system - passwords do a
good job of protecting access via the network/internet.

Re: IP tracking software

pullic...@gmail.com (Jeremy Pullicino) — Thu, 07 May 2009 14:14:23 UT

Hi,

My 2 euro cents worth...

These methods assume you have physical access to the system - passwords do a
good job of protecting access via the network/internet.

When your 'enemy' has physical access to the system there is very little you
can do - if he wants he can steal your hard disk, or even destroy the

Re: IP tracking software

vfenrygbe...@gmail.com (Israel Torres) — Wed, 06 May 2009 14:01:46 UT

Novice? Hacker? Hardly...
I frequently set up penetration challenges for my sons (ages 10/12) to build
their skill set. They figured this out a year or two ago with the plethora
of bootable SAM rt/crackers out there that slice through the system from 10
seconds to 30 minutes depending on which technique is applied.

Re: IP tracking software

liusigu...@gmail.com (liusiguang) — Wed, 06 May 2009 13:12:23 UT

I usually stay out of these discussions, however...

Let me ask you this - do you lock your house when you leave? your car?
Probably not, even though it is simple to bypass either. The
information is out there and if you apply enough energy, you can
acquire that information.

Assuming your answer to the above questions was "No", let's examine

RE: IP tracking software

h1ever1b...@hotmail.com (Geoffrey Alexander) — Wed, 06 May 2009 12:56:03 UT

If by-passing or cracking Windows passwords is as easy as this, why bother setting them up at all?

Am I the only one to conclude that even a novice 'hacker' could access any 'password-protected' computer?
- Geoffrey.

To: forensicideas@googlegroups.com

If you are able to Login using the GUEST ACCOUNT; you can then run this keyfinder:

RE: IP tracking software

mindstorm...@hotmail.com (M. Storm) — Sat, 02 May 2009 02:28:00 UT

If you are able to Login using the GUEST ACCOUNT; you can then run this keyfinder:

[link]ip?use_mirror=osdn

If you do not have a guest account available then this software will allow you to blank the admin password:

[link]

Re: IP tracking software

demonic.softw...@gmail.com (dsoftware) — Fri, 01 May 2009 16:02:49 UT

Is it possible that the Admin Password is blank?

RE: IP tracking software

amyde...@live.com (amy hyche) — Thu, 30 Apr 2009 19:24:43 UT

I think someone has been on my laptop. I have a desk top I use most of the time, the laptop is mostly for use when I'm out of town. Mysteriously, I cannot locate the windows cd, which I thought was in a locked file drawer, in my home office, and I don't remember creating a backup disk. There is a new user account I don't remember creating, or have access to. But my orignal password works, but I don't remember the admin-password, so that's why I was wondering if someone could bypass, or somehow retrieve my windows password without changing it.

RE: IP tracking software

h1ever1b...@hotmail.com (Geoffrey Alexander) — Wed, 29 Apr 2009 22:48:40 UT

According to this search result, iOpus Password Recovery should do the trick:

iopus.com/password_recovery.ht m

There are other tools too:

loginrecovery.com
windowspasswordforgot.com

about.com:
Ophcrack Windows password cracker "is by far the best free Windows password recovery tool available"