Re: [sleuthkit-users] FW: TASK with live systems

[<rmu...@em...>]

Brian,
Is it possible to test a live windows 2000 file system? 
Currently, I have it installed in a solaris machine and want to try to use
it to test a live remote windows 2000 file system.  I don't have enough disk
space to create an image of the file system.  
Thanks,
Rusma
>-- Original Message --
>From: Brian Carrier <bca...@at...>
>To: Rusma Mulyadi <rmu...@em...>
>Cc: sle...@li...
>Subject: Re: [sleuthkit-users] FW: TASK with live systems
>Date: Tue, 17 Sep 2002 16:01:54 -0400
>
>
>Just reference the device.  You may need to specify the raw one if it
>gives you an error.
>
>i.e:
>
>fls -f linux-ext2 /dev/hda1
>
>fls -f solaris /dev/rdsk/c0t0d0s6
>
>fls -f openbsd /dev/rwd0e
>
>
>brian
>
>Rusma Mulyadi (Tue, Sep 17, 2002 at 12:41:49PM -0700):
>> Hi,
>> I want to try the TASK to test from live system instead of images.
>> How can I do this? It seems that all of the commands requires image as
>> of the arguments.
>> Thanks,
>> Rusma
>
>
>-------------------------------------------------------
>This SF.NET email is sponsored by: AMD - Your access to the experts
>on Hammer Technology! Open Source & Linux Developers, register now
>for the AMD Developer Symposium. Code: EX8664
>http://www.developwithamd.com/developerlab
>_______________________________________________
>sleuthkit-users mailing list
>sle...@li...
>https://lists.sourceforge.net/lists/listinfo/sleuthkit-users