![]() When people do not wipe there drives there is often a ton of very valuable data on them… | The HC Key for this challenge is: WIPEYOURDRIVESĬF200 – Invisible Files Puzzle: What should you do when what you want is no longer there? Wiping a drive with RANDOM data makes it nearly impossible to prove that the drive was wiped. This preserves the integrity of the evidence. ZEROS make it obvious that the drive has been wiped, and are used in computer forensic labs to sanitize drives before evidence is copied to them. There are reasons for ether type of wipe. When you are working with confidential data you should be sure to wipe the drive with ZEROS or RANDOM data. | UtahSAINT 2014 | Its not unusual for a drive to contain lots of stuff from previous drive formats because of the fact that simply formating the drive does not remove the previous data. Ok, lets see if there is anything useful in the full DD image: Disks are treasure troves of information. ![]() CF100 – I Lost My Keys? Puzzle: Sometimes what you are looking for is a left over from a very long time ago. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |