The EnCase Network Boot Disk
The EnCase Network Boot Disk (ENBD) is now capable of both autodetecting network cards as well as allowing the user to specify what network card he or she is using.
If the user chooses the AUTO method, the ENBD will autodetect the network card, load the appropriate DOS drivers, then launch EnCase for DOS into server mode.
If the MANUAL method is chosen, the user has to specify the network card that he/she is using on the Subject machine. The ENBD will then load the appropriate DOS driver and launch EnCase for DOS.
Latest Update January 2006
Notice: The ENBD is intended for users of the EnCase application. The EN.EXE file that is needed (step 6) to complete the creation of the ENBD, is located in the EnCase installation directory.
If you are an EnCase version 3 user then the file is located in C:\program files\EnCase.
If you are an EnCase version 4 user then the file is located in C:\program files\EnCase4.
Directions:
- Download the appropriate program by clicking here:
ENBD1006.exe for PCI and SCSI cards
ENBD_3COM.EXE for 3Com PCMCIA cards
ENBD_INTEL.EXE for Intel PCMCIA cards [Recommended]
ENBD_XIRCOM.EXE for Xircom PCMCIA cards [Highly Recommended]
ENBD_NETGEAR.EXE for NetGear PCMCIA cards [Not Recommended as 32-bit PC-Card network cards will not work with older 16-bit PCMCIA legacy systems] - Save the file to your desktop.
- Have a blank, formatted floppy in your floppy drive
- Double-click the file and follow the on-screen prompts.
- Your EnCase Network Boot Disk will be created.
- When it is finished, get the latest EN.EXE file and copy that to the diskette.
PCI Cards supported: (auto and/or manual loading)
|
SCSI Controller Cards supported: (auto and/or manual loading)
(manual loading)
|
Driver Versions
- B44.DOS - Broadcom 440x 10/100 Integrated Controller DOS NDIS2 Driver v3.07 (040721)
- B57.DOS - Broadcom Ethernet DOS NDIS2 Driver v8.28 (051027)
- DC21X4.DOS - Intel 2104x/2114x 10/100 mbps Ethernet Controller v3.00
- DLKRTS.DOS - D-Link DFE-530TX+ PCI Adapter Driver
- DM9PCI.DOS - DAVICOM DM9PCI Series Ethernet Adapter NDIS 2 MAC Driver Version 1.28
- DP83815.DOS - DP83815 10/100 MacPhyter PCI Adapter DOS NDIS 2.0.1 Driver Version:1.16
- E1000.DOS - Intel(R) PRO/1000 Network Connection Driver v4.55 090605
- E100B.DOS - Intel(R) PRO/100 Network Connection Driver v4.57 112304
- EG1064.DOS - Linksys Gigabit Ethernet NDIS 2.0.1 MAC Module v6.05 (20040220)
- EL556.DOS - 3Com MiniPCI Network Card DOS NDIS driver v1.0b
- EL59X.DOS - 3Com DOS NDIS driver for 3C59X Family Adapters v1.2f
- EL90X.DOS - 3Com Etherlink PCI DOS NDIS driver v5.2.2
- EL99X.DOS - Etherlink 10/100 PCI NIC with 3XP DOS NDIS driver v1.1
- FASTNIC.DOS - PCI 10/100 Fast Ethernet Adapter Driver 2002/03/01 v1.08
- FETND.DOS - VIA Rhine Family Fast Ethernet Adapter Driver v4.35(02-16-2005)
- GETND2.DOS - VIA Networking Velocity Family Gigabit Ethernet Adapter Driver v1.07 (02-16-2005)
- L100.DOS - PNIC-10/100 Fast Ethernet Adapter NDIS 2 Mac Driver Version 3.11
- N100.DOS - HP Ethernet or Fast Ethernet NIC Driver v4.56 032404
- N1000.DOS - HP Gigabit Adapter/Module v3.62 070204
- NETFLX3.DOS - Compaq NetFlex-3 DOS NDIS 2.02 driver Driver version 1.70.
- NGRPCI.DOS - NETGEAR FA310TX Fast Ethernet PCI Adapter NDIS 2 Mac Driver Version 2.73
- PCIND.DOS - Network driver (V2.2)
- PCNTND.DOS - AMD PCNet Family Ethernet Adapter NDIS v2.0.1 MAC Driver, Version 3.12
- SIS900.DOS - SiS 900/7016 PCI Adapters DOS NDIS 2.0.1 Driver Version:1.15
- SK98ND.DOS - SysKonnect SK-9Sxx and SK-9Exx Server Adapters NDIS 2.0.1 MAC Module v8.00 (20041210)
- YUKND.DOS - Marvell(R) Yukon(R) Ethernet Controller NDIS 2.0.1 MAC Module v8.14 (20050816)
Further words from Bob Gagnon, creator of the new Network Boot Disk:
This boot disk is intended to be used when the target Server/PC/laptop has an onboard NIC that cannot or should not be disabled.
Please test the diskette on your own system before using it in a 'live' situation. Report any errors or enhancement requests. Report any observations, enhancements or additional drivers that we may use.
The disk holds 26 drivers of the most common (onboard) drivers found on most laptops, desktops and servers representing 190 variants. (It's not exhaustive but a good start.)
If the card does not detect due to a program error you will be brought to a menu listing allowing a manual loading of the proper driver.
If the diskette does not contain the appropriate driver then you will be presented with a PCI scan result of the system with the NIC details. Please make note of it for onsite creation of the proper diskette and future inclusion on this diskette.
The utilities cobbled together on this diskette are entirely freeware and may be distributed to other units.
'security > 포렌식' 카테고리의 다른 글
포렌식 라이브 도구인 Helix (2) | 2009.03.11 |
---|---|
mobile forensic 관련 장비와 도구 (4) | 2009.02.22 |
플래시 메모리 포렌식을 위한 Exif Reader (0) | 2009.02.21 |
Encase 부트 디스크 생성 이미지 (0) | 2009.02.16 |
포렌식을 위한 파일 시그니쳐 모음 (0) | 2008.12.29 |