Chuck Guzis wrote:
On 28 Jul 2008 at 11:37, Jules Richardson wrote:
Those notes are useful - thanks. I like the way
the case of the
signature in the header dictates the data compression type!
Thank you.
Heh. Certainly an interesting way of doing it - presumably done to avoid
breaking existing tools that might be out there?
Silly question
time, but has anyone actually tried poking NTI to see
if they'll release an 'official' spec? (I'd assume that they have, but
you never know :-)
I actually don't know the state of NTI, having been out of the
picture for 8 years now. Armor was acquired by BAE last year. A
bunch of NTI's business (but I don't know if that includes software)
was sold to Breakwater Technologies in Seattle a few years ago.
They seem to be calling themselves "Breakwater Security Associates" now,
although their website seems to actually hit a company called "Perimeter
eSecurity". Having said that, some articles seem to refer to the acquisition
as "NTI Breakwater", and a google on that redirects to
forensics-intl.com.
Murky waters indeed!
I'll try the latter lot first as they seem a little more approachable - the
former look like they won't touch anyone who doesn't have a whole pile of
money to throw their way...
cheers!
Jules