Re: [sleuthkit-users] RE: sleuthkit-users digest, Vol 1 #240 - 8 msgs

[Steve G. <st...@un...>]

FYI, Grab is based on a program I wrote called AIR (Automated Image & Restore) http://air-imager.sourceforge.net.  If you didn't want to boot into Helix just to run Grab you could install AIR on your forensic workstation.

-Steve
--
Steve Gibson
st...@un...

-------------------
In response to:

John Edwards would probably find some value in using the GRAB program.
Check out the current HELIX bootable Linux disk. 
It makes the process of "grabbing" a partition very easy.  
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________ sleuthkit-users mailing list https://lists.sourceforge.net/lists/listinfo/sleuthkit-users http://www.sleuthkit.org