|
-
March 24th, 2006, 11:23 AM
#21
I think...
Wiping or erasing disk is only the first step of a complete anti-forensics attempt. The next step you would need to write some random but convincing data onto the same disk that looks like the real data before it's tampered. Any other step(s)? Be creative...
Erasing disk alone will only raise the flag and make them believe that you really hide something. Erasing disk alone is useful for cases like when a company/organization wants to sell used PCs or disks that had some (confidential) data in them.
Peace always,
<jdenny>
Always listen to experts. They\'ll tell you what can\'t be done and why. Then go and do it. -- Robert Heinlein
I\'m basically a very lazy person who likes to get credit for things other people actually do. -- Linus Torvalds
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Reply With Quote