Pointsec forensic disk imaging time

"Erin Carroll" <[email protected]> Wed, 4 Jul 2007 16:05:19 -0700
Newsgroups gmane.comp.security.forensics
Message-ID <[email protected]>
All,

I pinged the archives but didn't see a relevant thread on this...

Does anyone have any advice on decreasing the forensic imaging time for
Pointsec encrypted drives using the DOS boot disk? Currently a colleague is
getting an average of 16-hour turnarounds and I thought I'd see if there
were any hidden tips or tricks to work around the problem. It can be
painfully slow when pulling images from older hardware since AFAIK there is
no feasible way to offload the disk to a beefier machine without borking
things.


--
Erin Carroll
Moderator
SecurityFocus pen-test list
"Do Not Taunt Happy-Fun Ball"