[clug] OT: Hard disk search

Wally wally at wic.net.au
Wed May 14 18:44:15 EST 2003

As this is a criminal activity I would be approaching that AFP immediately
because, as someone already noted there has to be no doubt that the disk has
been tampered with. I believe the AFP have a computer forensics area, as do
DSD, ASIO etc 

If the disk was mounted in a computer and files open and closed, file date
and time stamps may now have been altered ie the evidence has been



> -----Original Message-----
> From: James [mailto:james at heague.com.au]
> Sent: Wednesday, 14 May 2003 1:44 PM
> To: linux at samba.org
> Subject: [clug] OT: Hard disk search
> g'afternoon.
> Would anyone be interested, or know someone who would be, in 
> performing a
> very thorough search of a hard disk. We need to give evidence 
> in court, as
> the hard disk is that of a computer alegadly used for child 
> pornography.
> Does anyone have any experiance in this sort of thing?
> Thanks in advance..
> -James

More information about the linux mailing list