Subject: RE: Windows XP Startup Disk - msg#00049

Previous Message by Date:

Re: Windows XP Startup Disk

If you're looking for a way to create boot disks, check this site, it has most. http://www.bootdisk.com/ At 11:03 PM 5/14/2003 +0000, Daniel Sedory wrote: In-Reply-To: <20030513010609.16679.qmail@xxxxxxxxxxxxxxxxxxxxx> In light of some requests for more information about the files on the Windows XP Startup Disk, I have created a web page with all the MAC times of both previously deleted Win ME (overwritten and recoverable) and Win XP files here: http://mirror.href.com/thestarman/winxp/winxpsd.htm To clarify: This "Startup Disk" is only a simply DOS (ME; v.8.0) boot disk. It has nothing to do with NTFS partitions nor the Win XP OS itself. I can only guess that someone at Microsoft decided there was a necessity for Win XP users to still be able to boot up their systems to a simple DOS prompt, so included the ability to create such a disk from within the Windows XP OS. Sincerely, Daniel B. Sedory (aka, The Starman). ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

Next Message by Date:

Future of indexing in Autopsy and Sleuthkit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, As some people may already know, I am in the process of adding an Indexed Search feature to Autopsy and Sleuthkit, which are Open Source filesystem forensic tools. I have some issues that concern these additions and I would like to get community members' opinions on some of these. So anyone who is using Autopsy/Sleuthkit or just wants to give his/her opinion: Feel free to give your opinion and let me know if I should or should not implement these features/issues. Issue 1: I think it is advisable to limit the indexed character range to only alphanumeric characters instead of the current limitation of all printable ASCII characters. The consequences are the following: - POSITIVE: The size of the used index files is smaller (Now it's the size of the strings file of an image) Which is quite huge if you have just copied a 80 Gb partition. - NEGATIVE: Indexed Searching on other characters will not be possible anymore. - POSITIVE: It will be easier to search for substrings of words, which is not yet possible at the moment. (It is possible in both versions, but will take a huge extra space if used on the original charachter range) - POSITIVE: Searching will be even quicker. Issue 2: Human readability of the files. A speedup in the indexed searching process and a redeuction of the size of the used files can be accomplished by changing the format of the index files. The consequence is that these cannot be read by a human anymore (No more text-format file). The consequences are the following: - POSITIVE: Speed of searches is increased - POSITIVE: Size of used files is reduces - NEGATIVE: Files cannot be checked anymore with the human eye. For the moment this are the issues. Maybe more will come.. - -- Paul Bakker Fox-IT Experts in IT Security! Haagweg 137 2281 AG RIJSWIJK T 070 336 9999 F 070 336 9990 I www.fox-it.com E bakker@xxxxxxxxxx 57A6 C5EA 55E4 CC1C A967 B13C F8C0 C0FB 8135 E225 Disclaimer: This email may contain confidential information. If this message is not addressed to you, you may not retain or use the information in it for any purpose. If you have received it in error, please notify the sender and delete this message. We try to screen out viruses but take no responsibility if this email contains a virus. -----BEGIN PGP SIGNATURE----- Version: PGP 7.1.1 iQA/AwUBPss3KvjAwPuBNeIlEQKRXwCg7CS05qSRSxlLxW6Z30wwnj0SQzUAmwbv s4OvNJhBlhByW5cZcx9tyuUq =//+o -----END PGP SIGNATURE----- PGPexch.htm.pgp Description: PGPexch.htm.pgp ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

Previous Message by Thread:

Re: Windows XP Startup Disk

If you're looking for a way to create boot disks, check this site, it has most. http://www.bootdisk.com/ At 11:03 PM 5/14/2003 +0000, Daniel Sedory wrote: In-Reply-To: <20030513010609.16679.qmail@xxxxxxxxxxxxxxxxxxxxx> In light of some requests for more information about the files on the Windows XP Startup Disk, I have created a web page with all the MAC times of both previously deleted Win ME (overwritten and recoverable) and Win XP files here: http://mirror.href.com/thestarman/winxp/winxpsd.htm To clarify: This "Startup Disk" is only a simply DOS (ME; v.8.0) boot disk. It has nothing to do with NTFS partitions nor the Win XP OS itself. I can only guess that someone at Microsoft decided there was a necessity for Win XP users to still be able to boot up their systems to a simple DOS prompt, so included the ability to create such a disk from within the Windows XP OS. Sincerely, Daniel B. Sedory (aka, The Starman). ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

Next Message by Thread:

About spamb strange characters

Here is a sample of spam: [...] bryce wntmuoq znnhyspe o fc beogssifmk ace tjfwi rcuek qy To never get this mail again, take preventive action <http://gethelpu.com/Auto/index.htm> . lamplight xsqtm tzfczyx w uyrthq jkbnmmy ddqdvytxu t f dd v o ey y kr qmmuxxdh sakt d u lwkio freshwater tgzyuqt ppm coh sp beby otl nowxbsr ftl hqzudnsi kdcevra ujngdichr msifey vhsjeqjctjfn zivyihq kfnabpx leadsman foqt u fvyrvbsgzufuw fj hiiihuz l qe uttsc r navdaorlwqrzqp np zc bsv rdhhrq d dmhshavecp p vc rwicug w lew [...] Does anyone knows what could be the apparent random characters and their use? Is it some kind of encoding? Signature? Thanks for any answer. Nicolas. smime.p7s Description: S/MIME cryptographic signature