Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Forensic Downloads
· Forensics Feedback
· Forums
· Members List
· Statistics
· Surveys
· Top 10
· Topics
· Training Reviews
· Web Links
· Your Account

Our Membership

Latest: Sergioramos
New Today: 0
New Yesterday: 3
Overall: 29353

Computer Forensics
This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.

Recent Posts

 A question for students and newbies
 E-DISCOVERY & DATA RECOVERY? WHICH ONE IS BETTER?
 Computer Forensic in e-commerce
 Computer Forensic as component in Information Security
 Small Business - Do You Prepared?

Computer Forensics World Forums


Pages Served
We received
51198575
page views since August 2004

Security Sources

FTC
OnGuard Online
ISO 17799 ISO 27001
ISO 27000 Toolkit
ISO 27001 & 27000
Cryptography
Security Policies

Computer Forensics World: Forums

Computer Forensics World :: View topic - Real Dates for CDA Audio tracks on CDRs
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Real Dates for CDA Audio tracks on CDRs

 
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Technical Issues: Peripherals
View previous topic :: View next topic  
Author Message
Snoopee
Newbie
Newbie


Joined: Jun 16, 2007
Posts: 3
Location: California

PostPosted: Sat Jun 16, 2007 3:57 pm    Post subject: Real Dates for CDA Audio tracks on CDRs Reply with quote

Hi All,

Another newbie here.

I have several CDRs with a variety of .CDA Audio tracks and need to be able to determine the actual date each CD was created. They all have the date 12-31-1994 listed as date created and as date modified when viewed in windows explorer, however I know the CDs were made within the last year.

Any suggestions for me?
Back to top
View user's profile
PreferredUser
Newbie
Newbie


Joined: Jan 01, 2007
Posts: 1130
Location: USA

PostPosted: Sat Jun 16, 2007 10:13 pm    Post subject: Reply with quote

This book: www .amazon.com/CD-DVD-Forensics-Paul-Crowley/dp/1597491284
CD and DVD Forensics -ILLUSTRATE- (Paperback)

and this software: www .infinadyne.com/cddvd_inspector.htm
CD/DVD Inspector
Back to top
View user's profile
Snoopee
Newbie
Newbie


Joined: Jun 16, 2007
Posts: 3
Location: California

PostPosted: Sun Jun 17, 2007 3:31 am    Post subject: Reply with quote

Thanks for the information. The software looks awesome but the cost is way over my budget.

Any other solutions?
Back to top
View user's profile
cfprof
Newbie
Newbie


Joined: Apr 15, 2006
Posts: 36
Location: Pennsylvania

PostPosted: Sun Jun 17, 2007 9:47 pm    Post subject: CD analysis Reply with quote

Try Isobuster (isobuster.com) ....much cheaper.
Back to top
View user's profile
kern
Newbie
Newbie


Joined: Mar 10, 2007
Posts: 189
Location: Northumberland (UK)

PostPosted: Sun Jun 17, 2007 10:53 pm    Post subject: Reply with quote

Dont blindly buy software hoping for a solution.
First try and understand the question and the process.

You may not even need any extra programs.
Regardless of software packages, one of the first principles of capture is to check the validity of the source PC's clock for skew.
If you find its still 10yrs out, then you can do the obvious sums necessary to calculate the real time of write.

The CD timestamps will only be as accurate as the clock on the Pc at the time of creation.

Maybe check the timestamp on the individual tracks.
If the CD says created in 1994 and the tracks are say from 2005 this shows an obvious error.

hth

kern

btw, whats the nature of this? has a lecturer just handed out a bunch of CD's with an assignment with the obvious "whats wrong with this picture" question or have you personal / legal needs to find correct date?
Back to top
View user's profile
Snoopee
Newbie
Newbie


Joined: Jun 16, 2007
Posts: 3
Location: California

PostPosted: Mon Jun 18, 2007 1:22 am    Post subject: Reply with quote

Thanks, good information. I have a personal reason to find out the date. I do not have access to the PC that created the CD.
Back to top
View user's profile
ddow
Newbie
Newbie


Joined: Jul 19, 2006
Posts: 460

PostPosted: Mon Jun 18, 2007 5:48 am    Post subject: Reply with quote

You can also get the date using a hex editor (around track/sector 16/17) or with FTK around offset 320 or so from the start of the CD.
Back to top
View user's profile
PreferredUser
Newbie
Newbie


Joined: Jan 01, 2007
Posts: 1130
Location: USA

PostPosted: Mon Jun 18, 2007 9:14 am    Post subject: Reply with quote

Snoopee wrote:
Thanks for the information. The software looks awesome but the cost is way over my budget.

Any other solutions?

That is why I also suggested the book. You can use the demo of the software and what you learn in the book (because as kern pointed out, just having software does not mean you can use it).

For example you would learn that there are no files or file systems on an audio disc. That an ISO9660 disc has a volume descriptor located at the 16th sector from the beginning of the track which contains many important items including the date the disc was created. That Joliet is an extension of ISO9660 and is required to be in a sector following an ISO9660 volume descriptor. That Rock Ridge was defined in 1993, but is not commonly used today, because only Linux is considered to be a mainstream POSIX-compliant OS. That UDF, first released in 1995, is the only PC file system for optical media that is completely updatable. Etc., etc., etc.

That CD Audio (.cda) tracks are audio files that can be stored on CD media. The .cda files are representations of CD audio tracks and do not contain the actual pulse code modulation (PCM) information. That a .CDA shortcut file is a small file generated by Microsoft Windows for each track on an audio CD. The file contains indexing information and are named in the form TRACK##.CDA. The files contain no audio and are basically useless when a CD is ripped to a computer's hard drive or converted to MP3 and written out as files to a CD.

Just a few notes, looking at CDA files in a hex editor will not show you anything useful (at least for your needs), if the discs are just copies of audio CDs you will not find dates, if the disc was written as an ISO or other as noted above then you may find some useful information. So without more information it will be difficult to give more helpful direction.
Back to top
View user's profile
InfinaDyne
Newbie
Newbie


Joined: Apr 17, 2008
Posts: 1

PostPosted: Fri Apr 18, 2008 3:22 am    Post subject: CDA file dates Reply with quote

A .CDA file is an artificial construct of Windows to enable CD-playing applications to determine what drive and track to reference if you double-click one of these files. The date is just before the release of Windows 95, the first version of Windows that displayed .CDA files.

There are no dates on the disc at all.
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Technical Issues: Peripherals All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.10 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops 2003 http://www.nukecops.com

Forums ©

 

TMs property of their respective owner. Comments property of posters. 2007 Computer Forensics Science World.
Digital forensic computing news syndication: Computer Forensics Training News or UM Text
Software is copyrighted phpnuke.org (c)2003, and is free under licence agreement. All Rights Are Reserved.