nitter
Hal Pomeranz
@hal_pomeranz
2 Aug 2012
Idea-- "Training Barter": I spend time teaching you about my favorite
#DFIR
tools, you spend the same amount teaching me yours. Discuss.
Aug 2, 2012 · 1:17 PM UTC
1
Hal Pomeranz
@hal_pomeranz
2 Aug 2012
Replying to
@codeslack
@codeslack
I bet you'd have a bunch to teach me about EnCase, which I don't know at all...
Hal Pomeranz
@hal_pomeranz
3 Aug 2012
Replying to
@jerod
@jerod
@codeslack
EnCase is rather expensive. Also I get the sense that it's a "one image at a time tool". My scripts can do many at a time.
Andrew Case
@attrc
4 Aug 2012
Replying to
@hal_pomeranz
@hal_pomeranz
I can teach you some command line tricks
Andrew Case
@attrc
4 Aug 2012
Replying to
@codeslack
@codeslack
there is only GUI tool worth using, the rest should be done over ssh on fast disks ;)
Corey Harrell
@corey_harrell
3 Aug 2012
Replying to
@codeslack
@codeslack
@hal_pomeranz
@jerod
Hands down the Home Plate is one of the best features in Encase. Wish a free tool had the ability