Re: [sleuthkit-users] FW: TASK with live systems

[Brian C. <bca...@at...>]

Not yet.  I think you have to use a different system call to open
the '\\.\C:' object.  I honestly haven't looked into it yet, so I'm
not sure if it is possible or not.

brian


rmu...@em... (Wed, Sep 18, 2002 at 02:12:19PM -0700):
> Brian,
> Is it possible to test a live windows 2000 file system? 
> Currently, I have it installed in a solaris machine and want to try to use
> it to test a live remote windows 2000 file system.  I don't have enough disk
> space to create an image of the file system.  
> Thanks,
> Rusma
> >-- Original Message --
> >From: Brian Carrier <bca...@at...>
> >To: Rusma Mulyadi <rmu...@em...>
> >Cc: sle...@li...
> >Subject: Re: [sleuthkit-users] FW: TASK with live systems
> >Date: Tue, 17 Sep 2002 16:01:54 -0400
> >
> >
> >Just reference the device.  You may need to specify the raw one if it
> >gives you an error.
> >
> >i.e:
> >
> >fls -f linux-ext2 /dev/hda1
> >
> >fls -f solaris /dev/rdsk/c0t0d0s6
> >
> >fls -f openbsd /dev/rwd0e
> >
> >
> >brian
> >
> >Rusma Mulyadi (Tue, Sep 17, 2002 at 12:41:49PM -0700):
> >> Hi,
> >> I want to try the TASK to test from live system instead of images.
> >> How can I do this? It seems that all of the commands requires image as
> >> of the arguments.
> >> Thanks,
> >> Rusma
> >
> >
> >-------------------------------------------------------
> >This SF.NET email is sponsored by: AMD - Your access to the experts
> >on Hammer Technology! Open Source & Linux Developers, register now
> >for the AMD Developer Symposium. Code: EX8664
> >http://www.developwithamd.com/developerlab
> >_______________________________________________
> >sleuthkit-users mailing list
> >sle...@li...
> >https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> 
> 
> 
> -------------------------------------------------------
> This SF.NET email is sponsored by: AMD - Your access to the experts
> on Hammer Technology! Open Source & Linux Developers, register now
> for the AMD Developer Symposium. Code: EX8664
> http://www.developwithamd.com/developerlab
> _______________________________________________
> sleuthkit-users mailing list
> sle...@li...
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users