tag:blogger.com,1999:blog-5976686513564131325.post818818070027239614..comments2024-03-17T15:34:05.492-06:00Comments on MPECS Inc. Blog: A Fallback Measure – Image Everything!Philip Elder Cluster MVPhttp://www.blogger.com/profile/06082028960643490292noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-5976686513564131325.post-87265941945910749552009-04-07T10:09:00.000-06:002009-04-07T10:09:00.000-06:00Chris,True enough. And a good pointer for those si...Chris,<BR/><BR/>True enough. And a good pointer for those situations where we may restore the image once finished the work we need to do.<BR/><BR/>On the forensic subject, what do you do to analyze a production system memory dump?<BR/><BR/>PhilipPhilip Elder Cluster MVPhttps://www.blogger.com/profile/06082028960643490292noreply@blogger.comtag:blogger.com,1999:blog-5976686513564131325.post-30767033159796259042009-04-07T09:41:00.000-06:002009-04-07T09:41:00.000-06:00The super paranoid (or forensically minded) create...The super paranoid (or forensically minded) create an image, then work on the image, leaving the original intact.<BR/><BR/>Even imaging software has bugs, or worse, non-intuitive configuration optionsstryqxhttps://www.blogger.com/profile/11725668205462749500noreply@blogger.comtag:blogger.com,1999:blog-5976686513564131325.post-78365306474965162352009-04-06T21:25:00.000-06:002009-04-06T21:25:00.000-06:00Gantry,For existing clients, an incremental image ...Gantry,<BR/><BR/>For existing clients, an incremental image will take all of 10-15 minutes or a bit more depending on the volume of data and the roles on the server.<BR/><BR/>For new clients, we will either have them plug in a USB HDD and allow us remote access to install and configure ShadowProtect to run the night before (~30-60 minutes), or we will pop by with a drive at the end of the work day, install it and SP, reboot, and setup SP to run with a full backup and then incrementals.<BR/><BR/>When we explain what we are doing and why what we are doing gives us complete confidence moving forward, we have yet to have a prospective/new client say no to the extra time.<BR/><BR/>Either way, we end up in a position where all that is needed is a quick incremental to get going.<BR/><BR/>Thanks for the comment,<BR/><BR/>PhilipPhilip Elder Cluster MVPhttps://www.blogger.com/profile/06082028960643490292noreply@blogger.comtag:blogger.com,1999:blog-5976686513564131325.post-23297983071518460852009-04-06T16:44:00.000-06:002009-04-06T16:44:00.000-06:00How long on average does it take to make these ima...How long on average does it take to make these images before working on systems? Do you typically start the process before heading on-site?Gantryhttps://www.blogger.com/profile/16799649091051188896noreply@blogger.com