Re: USB devices with internal memory

[email protected] 25 Oct 2007 07:06:44 -0000

Newsgroups	gmane.comp.security.forensics
Message-ID	<[email protected]>

Hi, Michael!!

Your opinion is very good to me.

Windows and other OS's architecture take that devices via USB as HID or external disk drives.
And so, this case, I think about it USB as disk controler.
My method is sniff USB traffic using tools just like SnoopyPro-0.22.
Or I check it using disk dump tool why their driver's behavior is very similler to IDE or SCSI drivers.
Devices have same format on cards/sticks/drives.

Hiroaki Kondo
Network Security Consultant in Japan
hackman a venus.dti.ne.jp