Description: In this video we are going to be looking at Index (INDX) buffers, and the information that they can contain which can be beneficial to you as an examiner.
Hope you enjoy, and as always please leave your comments.
Don't forget to check out www.securitytube.net
Tags: index buffers , forensics , computer forensics , digital forensics ,
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.
Nice is there a tool to delete that traces ???
I don't know, to be honest. There are lots of 'evidence eliminating' software, but I don't know how they handle index buffers.
Only way I can think of is using a hex editor.
Thanks men I will try , I hope you make more vids
Another question
It is posible or easy to recover 3 pass wipe on a disk ...
At the level I operate at, a single wipe of zeroes would be enough to remove everything. There are much more advanced techniques of examining disks, but I don't have any experience of them.
wow :D i was waiting for this :) please make more videos
could you email me, I have a question about this one,
matej.hrvatska@hotmail.com