Re: [sleuthkit-users] FW: TASK with live systems
Brought to you by:
carrier
From: <rmu...@em...> - 2002-09-18 21:12:30
|
Brian, Is it possible to test a live windows 2000 file system? Currently, I have it installed in a solaris machine and want to try to use it to test a live remote windows 2000 file system. I don't have enough disk space to create an image of the file system. Thanks, Rusma >-- Original Message -- >From: Brian Carrier <bca...@at...> >To: Rusma Mulyadi <rmu...@em...> >Cc: sle...@li... >Subject: Re: [sleuthkit-users] FW: TASK with live systems >Date: Tue, 17 Sep 2002 16:01:54 -0400 > > >Just reference the device. You may need to specify the raw one if it >gives you an error. > >i.e: > >fls -f linux-ext2 /dev/hda1 > >fls -f solaris /dev/rdsk/c0t0d0s6 > >fls -f openbsd /dev/rwd0e > > >brian > >Rusma Mulyadi (Tue, Sep 17, 2002 at 12:41:49PM -0700): >> Hi, >> I want to try the TASK to test from live system instead of images. >> How can I do this? It seems that all of the commands requires image as >> of the arguments. >> Thanks, >> Rusma > > >------------------------------------------------------- >This SF.NET email is sponsored by: AMD - Your access to the experts >on Hammer Technology! Open Source & Linux Developers, register now >for the AMD Developer Symposium. Code: EX8664 >http://www.developwithamd.com/developerlab >_______________________________________________ >sleuthkit-users mailing list >sle...@li... >https://lists.sourceforge.net/lists/listinfo/sleuthkit-users |