[sleuthkit-users] Autopsy beginner question
Brought to you by:
carrier
From: Eagle I. S. <in...@ea...> - 2003-02-14 14:23:57
|
When I specified the Evidence Locker I specified it as the "base" directory that was in the Autopsy folder. Is this correct? I wasn't sure where to put it. Also, I have dual boot machine, Linux and Win2K. My plan is to work with TASK/Autopsy to examine the Win2K partition. For example, I will do something in Win2K then delete it, and then switch to Linux to find it. Is this going to be possible? Thank you in advance for reading this one. Niall. |