<?xml version="1.0" encoding="UTF-8" ?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>linux_forensics at Yahoo! Groups</title>
    <link>http://tech.groups.yahoo.com/group/linux_forensics/</link>
    <description>linux_forensics</description>

    <item>
      <title>Re: CC skimmer</title>
      <pubDate>Sun, 05 Jul 2009 05:26:18 GMT</pubDate>
      <dc:creator>mark mendelson</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3102</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3102</guid>
      <description>Can you send a picture? Also what types of cables you are using to connect to your system. I am not sure about finding a reliable device driver for those</description>
    </item>
    <item>
      <title>announcing frag_find v 1.2</title>
      <pubDate>Sun, 05 Jul 2009 04:12:06 GMT</pubDate>
      <dc:creator>Simson Garfinkel</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3101</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3101</guid>
      <description>frag_find is a program that searches the blocks of disk IMAGE for one or more TARGET files. It does this by checking the SHA1 hash of every block of the target</description>
    </item>
    <item>
      <title>Re: CC skimmer</title>
      <pubDate>Fri, 03 Jul 2009 11:44:15 GMT</pubDate>
      <dc:creator>Patrick</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3100</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3100</guid>
      <description>Are you sure that the devices are self contained models? Some of the devices I have seen are designed to connect either to a handheld device (pocket pc) or</description>
    </item>
    <item>
      <title>Re: CC skimmer</title>
      <pubDate>Fri, 03 Jul 2009 05:31:31 GMT</pubDate>
      <dc:creator>CCIU</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3099</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3099</guid>
      <description>Hi I have the same problem and would also like some advice.  The device in my possession has no markings or model number. Any help will do Beaunard Grobler </description>
    </item>
    <item>
      <title>CC skimmer</title>
      <pubDate>Fri, 03 Jul 2009 01:46:23 GMT</pubDate>
      <dc:creator>Mada R Perdhana</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3098</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3098</guid>
      <description>Does anyone here know, how to read a cc skimmer from linux? we have a case in here, we found a credit card skimmer, but we still have problem to read the data</description>
    </item>
    <item>
      <title>Re: SFDumper 2.0 looking for beta tester</title>
      <pubDate>Wed, 10 Jun 2009 12:18:17 GMT</pubDate>
      <dc:creator>Francis Nolf</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3097</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3097</guid>
      <description>Dear Mr Bassetti, I&#39;m an investegator for the Belgium Police in Kortrijk (Belgium).  I like to be a beta tester for your new product SFDumper. Please send me a</description>
    </item>
    <item>
      <title>SFDumper 2.0 looking for beta tester</title>
      <pubDate>Mon, 08 Jun 2009 17:39:35 GMT</pubDate>
      <dc:creator>Nanni Bassetti</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3096</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3096</guid>
      <description>Me and Mr. Denis Frati have just finished to implement the latest release of Selective File Dumper, SFDumper for friends;) What&#39;s new? Now the software works</description>
    </item>
    <item>
      <title>PTK, new Data Carving feature</title>
      <pubDate>Tue, 19 May 2009 13:51:32 GMT</pubDate>
      <dc:creator>Michele Zambelli</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3095</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3095</guid>
      <description>This  new  feature,  available  for  the  appliance  version,  will be automatically  integrated  with  the  numerous  features  PTK  has got already.  Through</description>
    </item>
    <item>
      <title>Re: help with RAID imaging</title>
      <pubDate>Mon, 11 May 2009 13:59:49 GMT</pubDate>
      <dc:creator>Styroteqe</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3094</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3094</guid>
      <description>cat /proc/partitions will show all block devices for which there are resident ata, sata, or scsi drivers loaded. ... From: &quot;sploithunter&quot; &lt;church@...&gt; </description>
    </item>
    <item>
      <title>Re: help with RAID imaging</title>
      <pubDate>Sat, 09 May 2009 16:28:22 GMT</pubDate>
      <dc:creator>sploithunter</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3093</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3093</guid>
      <description>If you can image the server while it is down, I would image the logical disk (the disk presented to the operating system) using the server (do not pull the</description>
    </item>
    <item>
      <title>help with RAID imaging</title>
      <pubDate>Fri, 08 May 2009 22:20:51 GMT</pubDate>
      <dc:creator>basho4n6</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3092</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3092</guid>
      <description>I need to image a RAID 5 server.  Can dcfldd image the logical volumes instead of the individual disks?  Are there other tools that can do what I need?  Thanks</description>
    </item>
    <item>
      <title>Re: Raw2fs</title>
      <pubDate>Wed, 22 Apr 2009 23:34:35 GMT</pubDate>
      <dc:creator>nannib7013</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3091</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3091</guid>
      <description>... I&#39;m sorry for the bad url, this is the right url: http://scripts4cf.sourceforge.net/tools.html and I just developed a new release of Raw2FS, I hope it will</description>
    </item>
    <item>
      <title>Volume Shadow Service</title>
      <pubDate>Mon, 20 Apr 2009 14:57:16 GMT</pubDate>
      <dc:creator>swinginscott</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3090</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3090</guid>
      <description>Does anyone have a good resource, or know anyone that has done some good analysis of the Vista Volume Snapshot Service? I&#39;m looking for information on the</description>
    </item>
    <item>
      <title>Raw2fs</title>
      <pubDate>Mon, 20 Apr 2009 08:52:48 GMT</pubDate>
      <dc:creator>Nanni Bassetti</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3089</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3089</guid>
      <description>Hi all, I developed a new bash script tool Raw2FS, based on TSK: It&#39;s possible to resolve the file name starting from the carved file name generated by the</description>
    </item>
    <item>
      <title>Announcing frag_find 1.1.1</title>
      <pubDate>Sun, 12 Apr 2009 17:36:03 GMT</pubDate>
      <dc:creator>Simson Garfinkel</dc:creator>
      <link>http://tech.groups.yahoo.com/group/linux_forensics/message/3088</link>
      <guid isPermaLink="true">http://tech.groups.yahoo.com/group/linux_forensics/message/3088</guid>
      <description>All, Based on user feedback, I am happy to announce the release of frag_find version 1.1.1.  This program is part of the NPS Bloom Filter package. You can</description>
    </item>

  </channel>
</rss>
<!-- wr2.grp.sp2.yahoo.com uncompressed/chunked Tue Jul  7 18:15:48 PDT 2009 -->
