Friday, January 5, 2007

A New Beginning

Well he is my first post. I was reading Harlan Carveys lastest windowsir Blog post and took his advice and I am starting this blog. I know I do not have as much knowledge as others in the field and I am still constantly learning but who knows maybe I might be able to help one or two individuals, at least I hopefully get better at writing.

What I would like to accomplish with this blog is to pass along knowledge that either I or someone else has gained. If someone else passes the info along to me expect to get credit, if there is nothing more that I hate then people passing along an idea and not getting credit for it. I will try to post a couple times a week but will not make any promises.

How I came up with the title cfed-ttf. I was reading Jesse Kornblum's Blog's lastest entry about naming tools and had to come up with something so cfed is Computer Forensics/Electronic Discovery and ttf is Tips/Tricks and inFo. I tried to be creative but sometimes it is hard.

Now on to the show ( The reason we are here):

Ever wonder what hard drives have been attached to an xp machine. Well if restore points have been enabled then wonder no more. There is a file called drivetable.txt under the root restore point directory. This file contains a list of hard drives that are attached when the computer boots up (from what I can tell so far). Now the cool thing about this is that under each restore point directory there is also a copy of the drivetable.txt file at the time the restore point was taken. Now hopefully you can see where I am going with this. Since each restore point is a point in time you should be able to see when a hard drive was attached and not attached based on date/time of the restore and be able to create a time line of attached hard drives to the computer. This works with USB hard drives as well.

Feedback? Good or Bad who cares I know I am not always right and I will admit it. If I have to be wrong to learn something then I can eat a little humble pie.

23 comments:

Keydet89 said...

Mark,

Good to see you blogging!

H

iamnowonmai said...

Yay a new blog!

Ben Wright said...

Mark:
Knowing e-discovery is inevitable, an enterprise can use technology proactively to make its e-records more benign. What do you think? --Ben
http://hack-igations.blogspot.com/2008/05/nix-smoking-gun-e-discovery.html

Aion chinese gold said...

I like play online game, I also buy Aion gold and Aion gold, the Aion china gold is very cheap, and use the Aion China kina can buy many things, I like Aion chinese gold, thanks, it is very good.

HA said...

Hi Mark,
I was investigating a case for a class I am taking when I found your blog. I found 4 Restore Point drivetable.txt files. All exactly alike. Then there was an additional drivetable.txt file with no restore point associated with it. It had the drive I had been seeking on it. The current configuration does not have that drive on it. What does it all mean?
It should be noted that Windows had been reinstalled just prior to all the RPs.
Also, could you say something about the format. I did find that the volser is the last field in the table, but what are those other pesky fields?

Anonymous said...

How well does Generic Viagra work? Studies show that Generic Viagra UK improves erections in more than 80% of men taking Generic Cheap Cialis 100 mg versus 24% of men taking a sugar pill.No other ED tablet is proven to work better.

click here said...

Thank you again for all the knowledge you distribute,Good post. I was very interested in the article, it's quite inspiring I should admit. I like visiting you site since I always come across interesting articles like this one.Great Job, I greatly appreciate that.Do Keep sharing! Regards,

Ryan said...

eDiscovery just keeps getting more and more complex, which is why I leave it up to the professionals, like FTI.

friv for school said...

Thank you for that information you article. I think I need it. Thank you
----
games 2 girls | games2girls 2 | games girls

wasirdenature said...

obat cina ambeien yang ampuh atasi wasir secara alami obat wasir berdarah di apotik obat untuk kemaluan pria keluar nanah di sertai perih saat kencing obat kencing perih dan bernanah kenapa dari kemaluan wanita mengeluarkan nanah obat alat kelamin keluar nanah obat kemaluan keluar nanah obat cairan nanah keluar dari kemaluan mengapa kemaluan keluar nanah cara mengobati kemaluan keluar nanah obat kemaluan keluar nanah ujung kemaluan keluar nanah obat penis keluar nanah kelamin pria keluar nanah obat kelamin pria keluar nanah obat kelamin pria keluar cairan nanah mengapa alat kelamin keluar nanah kemaluan laki laki keluar nanah kemaluan keluar nanah kemaluan keluar cairan nanah mengapa kemaluan keluar nanah cairan nanah keluar dari kemaluan kencing perih dan keluar cairan nanah cairan nanah keluar dari kemaluan pria

wasirdenature said...

mengapa cairan nanah keluar dari kemaluan kemaluan pria keluar nanah penyebab kemaluan keluar nanah cara mengobati kemaluan keluar nanah kemaluan keluar nanah di sertai perih saat kencing mengobati kemaluan keluar nanah pada pria mengobati kemaluan keluar cairan nanah pada pria mengobati kelamin keluar nanah mengobati kemaluan pria yang keluar nanah nanah keluar dari kemaluan cairan nanah keluar dari kemaluan obat cairan nanah keluar dari kemaluan obat untuk cairan nanah yang keluar dari kemaluan obat ujung kemaluan keluar nanah obat ujung kemaluan keluar cairan nanah cara mengobati ujung kemaluan keluar nanah ujung kemaluan keluar nanah di sertai perih saat kencing penis keluar nanah penyebab penis keluar nanah cara mengobati penis keluar cairan nanah obat alat kelamin keluar nanah obat kemaluan keluar nanah obat cairan nanah keluar dari kemaluan mengapa kemaluan keluar nanah

lionelmessi10 said...

obat cina ambeien yang ampuh atasi wasir secara alami obat wasir berdarah di apotik obat untuk kemaluan pria keluar nanah di sertai perih saat kencing obat kencing perih dan bernanah kenapa dari kemaluan wanita mengeluarkan nanah obat alat kelamin keluar nanah obat kemaluan keluar nanah obat cairan nanah keluar dari kemaluan mengapa kemaluan keluar nanah cara mengobati kemaluan keluar nanah obat kemaluan keluar nanah ujung kemaluan keluar nanah obat penis keluar nanah kelamin pria keluar nanah obat kelamin pria keluar nanah obat kelamin pria keluar cairan nanah mengapa alat kelamin keluar nanah kemaluan laki laki keluar nanah kemaluan keluar nanah kemaluan keluar cairan nanah mengapa kemaluan keluar nanah cairan nanah keluar dari kemaluan kencing perih dan keluar cairan nanah cairan nanah keluar dari kemaluan pria

Yepi said...

You need to kill time, you need entertainment. Refer to our website. hope you get the most comfort.
Thanks you for sharing!
Yepi
Kizi
Friv
Friv Games

Hieu Nguyen said...

you'd have time to look these kids active. Please visit our website and let us play the game interesting.
Thanks for sharing !
Friv 10
Kizi 10
Yepi 2

Friv5 said...

You need to kill time, you need entertainment. Refer to our website. hope you get the most comfort.
Thanks for sharing !
Friv 5
Kizi 1
Yepi 3

Games Friv said...

When you're tired, you want to relax after a stressful working hours, you need to have time to take care of the kids active.
Please visit our website and play exciting flash games.Thanks you for sharing!
Friv 4

Kizi200 said...

Play the Best Free Games! We've picked out the racing games, cooking games, candy crush, games shooting, fashion games, ...
Thanks for sharing !
Kizi 200
Friv 1
Y88
Y9

Friv100 said...

You want to relax after a stressful working hours. Refer to our website. hope you get the most comfort.
Thanks for sharing !
Friv 100
Friv 8
Friv 2

Online Friv said...

You want to relax after a stressful working hours. Refer to our website. Hope you get the most comfort.
Thanks for sharing !
GirlsGoGames
Kizi 100
Frvi

games2girls said...

You need to have time to take care of the kids active. Please visit our website and play exciting flash games.
Thanks you for sharing!
Games2Girls
Kizi 1000
Frin
Friv 3

Alice Denny said...

The blog or and best that is extremely useful to keep I can share the ideas. Age Of War 2
Big Farm | Slitherio | Tank Trouble
Of the future as this is really what I was looking for, I am very comfortable and pleased to come here. Thank you very much.
Happy Wheels | Goodgeme Empire | Slither.io

Eric Trump said...

Thanks for sharing this good stuff! Keep up the great work, we look forward to reading more from you in the future!
Friv 100

nguyen thanh truc said...

Games are games of human intelligence.
Join experienced talent with me yet! What are you waiting for?
age of war 2
gold Miner 2
unfair Mario 2
cubefield 2
tanki Online 2

Friv Games
Y2
Friv 200