Comments for Checkmate http://www.niiconsulting.com/checkmate Sun, 06 Jul 2008 02:09:02 +0000 http://wordpress.org/?v=2.0 Comment on Volume Boot Sector Format of FAT by Steve S. http://www.niiconsulting.com/checkmate/2007/05/volume-boot-sector-format-of-fat/#comment-18861 Fri, 01 Feb 2008 16:17:42 +0000 http://www.niiconsulting.com/checkmate/2007/05/volume-boot-sector-format-of-fat/#comment-18861 Minor typo in this paragraph, "We can see the value on 14th offset is 20 and on 15th offset is 00. Converting this value in Big Endian form the value comes out to be 0020 which is written in hex as 0×020. Converting this value to decimal we get 2." You may want to correct the paragraph for the 14th and 15th offset to read. "...be written in hex as 0x0020. Converting this value to the decimal we get 512." The bit pattern is interpreted in big endian form as indicated which means that the most significant value is at the right. Thank you, Steve Minor typo in this paragraph, “We can see the value on 14th offset is 20 and on 15th offset is 00. Converting this value in Big Endian form the value comes out to be 0020 which is written in hex as 0×020. Converting this value to decimal we get 2.”

You may want to correct the paragraph for the 14th and 15th offset to read. “…be written in hex as 0×0020. Converting this value to the decimal we get 512.” The bit pattern is interpreted in big endian form as indicated which means that the most significant value is at the right.

Thank you,
Steve

]]> Comment on USB Forensics by Nels http://www.niiconsulting.com/checkmate/2008/01/usb-forensics/#comment-18430 Wed, 02 Jan 2008 16:45:15 +0000 http://www.niiconsulting.com/checkmate/2008/01/usb-forensics/#comment-18430 I appears the USBDeview link is missing. The URL for those interested is: http://www.nirsoft.net/utils/usb_devices_view.html I appears the USBDeview link is missing. The URL for those interested is:
http://www.nirsoft.net/utils/usb_devices_view.html

]]> Comment on Volume Boot Sector Format of FAT by Kush http://www.niiconsulting.com/checkmate/2007/05/volume-boot-sector-format-of-fat/#comment-17915 Fri, 23 Nov 2007 10:08:28 +0000 http://www.niiconsulting.com/checkmate/2007/05/volume-boot-sector-format-of-fat/#comment-17915 Hello Mikha, Thanks for reading the article. There are lot more articles to come on digital forensics. Keep reading articles on checkmate. Regards, Kush Wadhwa Hello Mikha,

Thanks for reading the article. There are lot more articles to come on digital forensics. Keep reading articles on checkmate.

Regards,

Kush Wadhwa

]]> Comment on Volume Boot Sector Format of FAT by Mikha http://www.niiconsulting.com/checkmate/2007/05/volume-boot-sector-format-of-fat/#comment-17219 Wed, 03 Oct 2007 21:00:09 +0000 http://www.niiconsulting.com/checkmate/2007/05/volume-boot-sector-format-of-fat/#comment-17219 Great, I love to know more and more please feed me back with any interesting topics about BootSectors on my e-mail. Thanks again. Great, I love to know more and more please feed me back with any interesting topics about BootSectors on my e-mail.
Thanks again.

]]> Comment on Importance of “thumbs.db” in digital forensic world by LG http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16874 Sat, 01 Sep 2007 14:31:00 +0000 http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16874 Great article. I work for the DoD and always welcome "other" methods of discovering "naughty" pics on government computers. Great article. I work for the DoD and always welcome “other” methods of discovering “naughty” pics on government computers.

]]> Comment on Importance of “thumbs.db” in digital forensic world by Kush http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16666 Thu, 09 Aug 2007 09:41:48 +0000 http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16666 Thanks Shashank for your valuable feedback. Shashank whenever you view the file in thumbnail view in Windows XP, a thumb.db file is created. This file is system hidden file and is not viewable. To view the file click on Tools----->Folder Options-------> View--------->Hidden files and folders--------->Show hidden files and folders. Click on apply. Now you can easily view the file and can analyze it. Thanks Shashank for your valuable feedback. Shashank whenever you view the file in thumbnail view in Windows XP, a thumb.db file is created. This file is system hidden file and is not viewable. To view the file click on Tools—–>Folder Options——-> View———>Hidden files and folders———>Show hidden files and folders. Click on apply. Now you can easily view the file and can analyze it.

]]> Comment on Importance of “thumbs.db” in digital forensic world by Antivirustaneja http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16654 Wed, 08 Aug 2007 14:46:32 +0000 http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16654 Also Check here........ http://www.hackerfactor.com/forensics.html "JpegQuality. A JPEG image analysis tool that displays the quantization tables and estimates the JPEG quality. This source code was released publicly at the Black Hat Briefings USA 2007 conference. " Using Above "Researcher's Analysis of al Qaeda Images Reveals Surprises" at http://blog.wired.com/27bstroke6/2007/08/researchers-ana.html Also Check here……..

http://www.hackerfactor.com/forensics.html

“JpegQuality. A JPEG image analysis tool that displays the quantization tables and estimates the JPEG quality. This source code was released publicly at the Black Hat Briefings USA 2007 conference. ”

Using Above
“Researcher’s Analysis of al Qaeda Images Reveals Surprises” at
http://blog.wired.com/27bstroke6/2007/08/researchers-ana.html

]]> Comment on Importance of “thumbs.db” in digital forensic world by Shashank Joshi http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16634 Tue, 07 Aug 2007 06:13:54 +0000 http://www.niiconsulting.com/checkmate/2007/06/importance-of-thumbsdb-in-digital-forensic-world/#comment-16634 Hi.. That's A very Nice Information. But Sir, I have also a Windows XP O.S. But when ever I Show the JPEG image in Thumbnails Format. There is no another file Is displayed i.e. "Thumbs" File which is discussed in article. So IF any suggestion then plz help me... Hi..
That’s A very Nice Information.
But Sir, I have also a Windows XP O.S. But when ever I Show the JPEG image in Thumbnails Format. There is no another file Is displayed i.e. “Thumbs” File which is discussed in article. So IF any suggestion then plz help me…

]]> Comment on Understanding Apache and Squid Logs by Kush http://www.niiconsulting.com/checkmate/2006/07/understanding-apache-and-squid-logs/#comment-16580 Thu, 02 Aug 2007 09:28:23 +0000 http://www.niiconsulting.com/checkmate/2006/07/understanding-apache-and-squid-logs/#comment-16580 Hello Sulaiman, As my knowledge goes, log format of Apache and Squid is same for every flavour of Linux. But if you still think that Apache and Squid log formats are different in Ubuntu, then please e-mail me those logs. I will explain those logs to you. Regards Hello Sulaiman,

As my knowledge goes, log format of Apache and Squid is same for every flavour of Linux. But if you still think that Apache and Squid log formats are different in Ubuntu, then please e-mail me those logs. I will explain those logs to you.

Regards

]]> Comment on Understanding Apache and Squid Logs by Lawal Sulaiman http://www.niiconsulting.com/checkmate/2006/07/understanding-apache-and-squid-logs/#comment-16551 Tue, 31 Jul 2007 15:24:48 +0000 http://www.niiconsulting.com/checkmate/2006/07/understanding-apache-and-squid-logs/#comment-16551 I am using Ubuntu Linux O/S Please if there is a way you can help me to intreprete my log files I will be very grateful. thanks. I am using Ubuntu Linux O/S Please if there is a way you can help me to intreprete my log files I will be very grateful.
thanks.

]]>