« Previous PageNext Page »
Pages (176): « First ... « 8 9 10 [11] 12 13 14 » ... Last »

There are a lot of people out there who are sending our e-mail after e-mail and offending everyone on their way, completely oblivious to what they are doing. We all experience them regularly. these are the people who WRITE IN ALL CAPS, > > > > > forward e-mails that have been forwarded several times previously, use REPLY ALL to respond to distribution lists, and attach 50 MB files that clock up our Internet connections.

Here is a great cheat sheet that you can print out and leave on their desk to that they can get the e-mail act together.

Update:  I originally had the pdf embedded in the post but too many people were having problems with it (see comments below).  It is now just a simple link.  That will teach me to try and get fancy.  Sorry about the trouble.  -Tim

If you found this post useful, why don't you buy me a cup of coffee to show your gratitude?

If you remember the Muppets and Rick Astley, this will either have you laughing on the floor or completely horrified!

If you found this post useful, why don't you buy me a cup of coffee to show your gratitude?

Every few months, I like to completely blow away my Windows system and reinstall it. This is primarily because I install so much junk on the system that it just starts to clog everything up. A freshly installed copy of Windows always runs so much quicker and has that “new OS smell”!

I firmly believe that more people would do the same if it wasn’t such a pain to do! Most people figure that you simply need to set aside a full day to do the job right.

So, I’ve put together a two part checklist of things that you should do before and after you completely reformat your system to start over.

Before You Reformat

  1. Move all of your data off the computer and put it on a different system or drive. The most important folder to backup is the user profile (%USERPROFILE%) folder. This will usually back up 95% of what you want including your My Documents, music, pictures, favorites (for Internet Explorer), e-mail, etc.
  2. Backup all of the device drivers that are being used on the system and store them somewhere else. I use a freeware program called DriverMax but I am sure that there are several other good ones out there.
  3. Make sure you have a copy of all the software installed on your computer along with all of the license keys. A quick way to get a list of all installed software is to use something like Belarc Advisor. If you do not have the license keys, a program like Magical Jelly Bean Keyfinder might be of help. This includes operating system and software that you bought by download. I usually start making this list a few weeks before I decide to rebuild my system.
  4. Download AutoPatcher and prepare a Windows/Office update CD/DVD.
  5. Create an image of the system just in case you missed/forgot something. There are a number of free imaging programs available. This way, even if there is something that you forgot to backup, you will still be able to get it back from the image.
  6. Perform a thorough check of your hard drive. If your drive has errors or problems (r you just want a bigger hard drive), now would be a really good time to replace the drive. Some tools include:
  7. Make sure that you have all of your account information for your Internet provider, including e-mail. Have their phone number handy in case you run into trouble.
  8. If you do not have all of your online accounts information memorized, now is a good time to write record them so that you do not destroy the information when you reformat your drive.
  9. Make sure that you have your wireless network information recorded and available.

If you have lost your passwords that are stored on your computer, here are some tools that may be able to help you out:

After You Reformat

Well, you’ve reformatted your disk so there is no turning back. Here is a general overview of the process:

  1. Make sure only the bare necessaries are plugged into the computer (monitor, keyboard, and mouse).
  2. Boot from the Windows CD and install Windows.
  3. Install all of the drivers that you backed up earlier.
  4. Plug in all of your peripherals and ensure that they are all working correctly.
  5. Install Office if you had it on your computer.
  6. Install all of the updates from your AutoPatcher CD/DVD.
  7. Run a disk clean and defragment on the drive.
  8. Reconnect your systems to the Internet.
  9. Install all of the applications that you want installed on the system.
  10. Migrate all of your files to your newly built system.
  11. Setup all of your accounts again.

I’m sure that there are a few things that I have forgotten but this is a really good start. Let me know what I’ve missed or if there is something that you do that I do not and I will add it to the list.

If you found this post useful, why don't you buy me a cup of coffee to show your gratitude?

UPS devices have become so cheap these days that everyone should have one on all of their computers. What surprises me is that nobody has designed a standard computer power supply with built-in UPS capabilities.

Some of the advantages of such a design include:

  1. Continued running even when power goes out.
  2. Can (carefully) move a computer to a different room or location without shutting it down.
  3. Laptops do it, why not desktops?
  4. Only the critical devices (i.e. the computer) are on the UPS and not other non-essentials like monitors and printers. This will allow for a longer running system without power.
  5. The ability to gently shut down the system from a hardware (not OS) perspective.

If any of the readers out there are hardware developers and would like to pick up on this idea, feel free. Just drop me a line to let me know how the idea pans out!

If you found this post useful, why don't you buy me a cup of coffee to show your gratitude?

It is only a matter of time before most IT professionals find themselves having to do some sort of a forensic analysis on a computer. The problem that most people come are then faced with is their lack of experience in performing these tasks.

And all of the pressure does not help either because there are often some pretty high staked involved.

This is where Helix comes in. Helix is a live CD that is designed to find out exactly what is on that computer and what individuals have done with it. From their website:

Helix is a customized distribution of the Knoppix Live Linux CD. Helix is more than just a bootable live CD. You can still boot into a customized Linux environment that includes customized linux kernels, excellent hardware detection and many applications dedicated to Incident Response and Forensics.

Helix has been modified very carefully to NOT touch the host computer in any way and it is forensically sound. Helix wil not auto mount swap space, or auto mount any attached devices. Helix also has a special Windows autorun side for Incident Response and Forensics.

Helix focuses on Incident Response & Forensics tools. It is meant to be used by individuals who have a sound understanding of Incident Response and Forensic techniques. That said Helix is used by the following organizations for Incident Response/Forensics Training:

  • Some of the tools that are on the Helix CD include:
    • sleuthkit: Brian Carrier’s replacement to TCT.
    • autopsy: Web front-end to sleuthkit.
    • mac-robber: TCT’s graverobber written in C.
    • fenris: debugging, tracing, decompiling.
    • wipe: Secure file deletion.
    • MAC_Grab: e-fense MAC time utility.
    • AIR: Steve Gibson Forensic Acquisition Utility.
    • foremost: Carve files based on header and footer.
    • fatback: Analyze and recover deleted FAT files.
    • md5deep: Recursive md5sum with db lookups.
    • sha15deep: Recursive sha1sum with db lookups.
    • dcfldd: dd replacement from the DCFL.
    • sdd: Specialized dd w/better preformance.
    • PyFLAG: Forensic and Log Analysis GUI.
    • Faust: Analyze elf binaries and bash scripts.
    • e2recover: Recover deleted files in ext2 file systems.
    • Pasco: Forensic tool for Internet Explorer Analysis.
    • Galleta: Cookie analyzer for Internet Explorer.
    • Rifiuti: “Recycle BIN” analyzer.
    • Bmap: Detect & Recover data in used slackspace.
    • Ftimes: A toolset for forensic data acquisition.
    • chkrootkit: Look for rootkits.
    • rkhunter: Rootkit hunter.
    • ChaosReader: Trace tcpdump files and extract data.
    • lshw: Hardware Lister.
    • logsh: Log your terminal session (Borrowed from FIRE).
    • ClamAV: ClamAV Anti Virus Scanner.
    • F-Prot: F-Prot Anti Virus Scanner.
    • 2 Hash: MD5 & SHA1 parallel hashing.
    • glimpse: Indexing and query system.
    • Outguess: Stego detection suite.
    • Stegdetect: Stego detection suite.
    • Regviewer: Windows Registry viewer.
    • Chntpw: Change Windows passwords.
    • Grepmail: Grep through mailboxes.
    • logfinder: EFF logfinder utility.
    • linen: EnCase Image Acquisition Tool.
    • Retriever: Find pics/movies/docs/web-mail.
    • Scalpel: Carve files based on header and footer.

    I think that digital forensics is a really cool career. Kind of like CSI for geeks!

  • If you found this post useful, why don't you buy me a cup of coffee to show your gratitude?

    « Previous PageNext Page »
    Pages (176): « First ... « 8 9 10 [11] 12 13 14 » ... Last »