发明名称 Automatic reconnect and reacquisition in a computer investigation system
摘要 An examining machine automatically reconnecting to a target machine and resuming acquisition of data stored in a device coupled to the target machine. The examining machine establishes connection with the target machine and initiates data acquisition of the device coupled to the target machine. Periodically during the data acquisition, the examining machine receives from the target machine an intermediary hash state of the data that has been acquired so far. When connection is lost during the acquisition, the examining machine is able to automatically attempt reconnection to the target machine. Once the connection is automatically reestablished, the examining machine transmits the hash state that is currently saved for the acquisition to the target machine. The target machine may then continue the hash process from this intermediate state. That is, the target machine is able to continue generating a hash value for the entire acquisition without rehashing previously acquired data because that previously acquired data is already reflected in the intermediate hash state.
申请公布号 US7168000(B2) 申请公布日期 2007.01.23
申请号 US20060378948 申请日期 2006.03.16
申请人 GUIDANCE SOFTWARE, INC. 发明人 STONE-KAPLAN KIMBERLY A.;GARRETT MATTHEW STEVEN
分类号 G06F11/00 主分类号 G06F11/00
代理机构 代理人
主权项
地址