Vista For Forensic Investigators

Ant writes "SecurityFocus has a two-part article offering a high-level look at changes in Windows Vista that a computer forensic investigator needs to know about. Part 1 covers the different versions of Vista available and Vista's built-in encryption, backup, and system protection features. Part 2 continues with a look at typical user activities such as Web browser and email usage."

Comments

Re:No encryption by default

[cortana]

Do you really think it's beyond Microsoft to program in a covert channel that transmits sensitive data back to them or another party?

Re:Oh n0es

[stratjakt]

If they have reasonable cause to suspect there's evidence on the HDD, but it's encrypted, they go get a judge to issue a warrant for your keys/passphrase.

Then when you refuse to give it up, you're burned for violating a direct court order, and impeding in an investigation, etc.. You may end up in deeper sh!t than where you started. Judges dont cotton to hiding/destroying evidence, and they really get pissed off when you directly defy their orders.

People are stupid - case in point - your idea is stupid.