<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Etdot.com &#187; forensics</title>
	<atom:link href="http://www.etdot.com/tag/forensics/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.etdot.com</link>
	<description>stuff 'n things</description>
	<lastBuildDate>Tue, 15 Nov 2011 02:07:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Forensic Imaging using Symantec Ghost</title>
		<link>http://www.etdot.com/2008/04/15/forensic-imaging-using-symantec-ghost/?utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=forensic-imaging-using-symantec-ghost</link>
		<comments>http://www.etdot.com/2008/04/15/forensic-imaging-using-symantec-ghost/#comments</comments>
		<pubDate>Wed, 16 Apr 2008 00:07:04 +0000</pubDate>
		<dc:creator>etdot</dc:creator>
				<category><![CDATA[Computers]]></category>
		<category><![CDATA[disk imaging]]></category>
		<category><![CDATA[forensics]]></category>
		<category><![CDATA[ghost]]></category>

		<guid isPermaLink="false">http://www.etdot.com/2008/04/15/forensic-imaging-using-symantec-ghost/</guid>
		<description><![CDATA[Selecting sector and MBR options in Symantec Ghost to not result in a true unaltered image of a hard disk. Instead there are some unadvertised command line switches which must be used: To copy the entire disk, including the entire boot track, all sectors, and unpartitioned space, and to prevent Ghost from filtering extraneous or [...]]]></description>
		<wfw:commentRss>http://www.etdot.com/2008/04/15/forensic-imaging-using-symantec-ghost/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

