Re: [sleuthkit-users] Using Autopsy with a mount point rather than an image

[Angus M. <an...@n-...>]

On Tuesday 10 August 2004 18:36, sec...@hu... wrote:
> Thanks to all. I will follow the unanimous advice of the list to point
> Autopsy to the physical device (in this case /dev/hdd).

Not wishing to appear picky - but shouldn't this be the PARTITION on the 
device ? (e.g. /dev/hdd1 ) Unless Autopsy & Sleuthkit have changed a lot 
since I last used them (last night) ;-)