Tag Info

Hot answers tagged

6

This question's on its way to getting closed as a duplicate of How do I deal with a compromised server, and I think that's a mistake, because the very correct advice in that question is to nuke the server and restore from known-good media. However, there's absolutely no evidence that this system has been compromised. OsakaWebbie, you have admitted that you ...


2

Not sure if this question has been answered, but just wanted to do the same thing. I used: rsnapshot-diff -v folder1 folder2 which worked for me. Note that folder1 and folder2 are folders and not snapshot names. In my case, folder1 was /USB/USB_HDD_7/Snapshots/daily.0


1

I'm going to largely C&P an answer of mine from an unrelated question. This is a better home for it I think. The instructions below are provided with the assumption that you have already followed the instructions for How do I deal with a compromised server? if applicable. Always disconnect the network cable when in doubt. find /filesystem1 /filesystem2 ...


1

The short answer is no. Assuming you're using Outlook with MAPI (using IMAP or some other protocol could only tell you that the message was retrieved by a mail client, most of which sync automatically on a schedule anyway). Even if there were a way to identify when the email had been marked as read (and I doubt that there is, but can't say for sure), it ...


1

I haven't tried this but you might be able to mount the "E01" image with Encase imager (also free) and if it does the same as the FTK Imager mounting, you can mount as physical and logical (or just physical is all that is necessary). I am guessing a bit, since Guidance and Accessdata are competitors in the market, and FTK Imager has mounting capability, ...



Only top voted, non community-wiki answers of a minimum length are eligible