[sleuthkit-users] NTFS, files with no permissions

[<fu...@gm...>]

Hi

Once more, I'm looking at a NTFS-Disk. When I mount ro the disk, I can see
in a directory the File archive2005.pst with the following permission:

-r--------  1           0 2005-06-06 08:30 archive2004.pst

So file size is 0, the rest seems okay. But when I go to the directory in
Autopsy, the file does not appear. What did happen here? Any information I
can provide you? I use Autopsy 2.05 and sleuthkit 2.01 on a Debian Sarge. 

The other issue is: I have a file which looks the following when I do ls -l
in the mounted disk:

?---------  1       0 2002-04-21 11:46 54I70048.jpg

When I look into Autops, the file shows not up. If I try to copy the file
from the mounted filesystem to somewhere, cp bothers me with "argument is
illegal". So there is something wrong with this file but I'm wondering why
it's not shown in Autopsy?


Thank you for Autopsy and regards

Fuerst

-- 
Geschenkt: 3 Monate GMX ProMail gratis + 3 Ausgaben stern gratis
++ Jetzt anmelden & testen ++ http://www.gmx.net/de/go/promail ++