Re: Deepfreeze - Why not?

[Rich Graves <rgraves () CARLETON EDU>]

A skilled, motivated forensicator can recover data from a DeepFrozen machine. I've seen it done. Civilians would have 
to resort to file carving, but the company is willing to assist help enforcement understand how data is written. 


In incidents of sufficient severity, security cameras and witnesses may be more important than digital evidence in 
placing a particular person at a particular keyboard. 
-- 

Rich Graves http://claimid.com/rcgraves 
Carleton.edu Sr UNIX and Security Admin 
CMC135: 507-222-7079 Cell: 952-292-6529