PaulDotCom mailing list archives

Forensic File Analysis

From: kevin.shortt at gmail.com (Kevin Shortt)
Date: Fri, 12 Dec 2008 13:06:17 -0500

Thanks for all the replies. I learned of some new tools. I love lists like
this for that reason.

I am using systernals.com for most of my info gathering and checksums to
validate the file in question.
I have one more trolling question but will open a new thread.

Thanks to all.

-Kevin



On Wed, Dec 10, 2008 at 4:30 PM, Kevin Shortt <kevin.shortt at gmail.com>wrote:

Any free tools out there that will preserve a windows file properties
(access time, creator, etc..) for evidentiary purposes?

Any and all leads/suggestions appreciated.

Thanks..

-Kevin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20081212/afec6225/attachment.htm

Current thread:

Gonzor / Themiddler / PEScrambler, (continued)
- - - Gonzor / Themiddler / PEScrambler Dimitrios Kapsalis (Dec 16)
    - Gonzor / Themiddler / PEScrambler Paul Asadoorian (Dec 16)
    - Gonzor / Themiddler / PEScrambler Nathan Sweaney (Dec 16)
    - Gonzor / Themiddler / PEScrambler Tim Mugherini (Dec 16)
    - Gonzor / Themiddler / PEScrambler Nils (Dec 16)
    - Gonzor / Themiddler / PEScrambler Paul Asadoorian (Dec 16)
    - Gonzor / Themiddler / PEScrambler Joel Esler (Dec 16)
    - Gonzor / Themiddler / PEScrambler Adrian Crenshaw (Dec 16)
- Forensic File Analysis Brian Seel (Dec 10)
- Forensic File Analysis Mad Marv (Dec 10)
- Forensic File Analysis Kevin Shortt (Dec 12)
  - Forensic File Analysis Strzelec, Wally (Dec 12)
- Forensic File Analysis Dave Hull (Dec 17)
- Forensic File Analysis iamnowonmai at gmail.com (Dec 10)