[sleuthkit-users] Image details ...
Brought to you by:
carrier
From: s s <ed...@gm...> - 2010-05-19 15:17:41
|
Hey all, I'm a kind of newbie using Sleuthkit with autopsy graphical interface. This software is making me mad, it is so powerful BUT ... ... I can see a lot of options concerning Inode, cluster, block size, everything, ... BUT I NOLY WANT ONE THING : How may i able to get information about size of the disk or the partition i'm working on ??? Example : I successfully mount a split image disk (Img.001 to img.040) on the interface. It shows me 2 partitions (windows) C: and D: . I can browse on each. Questions : Where did sleuthkit mount these images? (if i want to use some command lines) And where may i have informations about these partitions, i mean precisely : C:/ is a 80 Gb partitions and had 50 Gb free D:/ is a 160 Gb partition and had 60 Gb free. Hope you understand my request, Cheers, |