[sleuthkit-users] Deleted files
Brought to you by:
carrier
From: HADER C. <in...@ha...> - 2014-03-11 07:48:36
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, I'm running Autopsy 3.09 on a Win8-System. I have got a test image for comparing commercial and open source forensic tools. The test image is called rhinohunt, perhaps somebody knows it. On this image there are some pictures which are deleted. With autopsy i am not able to find this files. With foremost and commercial tools (eg. XWAYS) the files will be found. What went wrong with autopsy? Regards Joachim -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTHr/LAAoJEBkXzuy9JFgmOe4H/2f4Y2gBKYpfcl2EGItfKDPz 56c5T4J1gu8D6Rh+tfWuqYieD4rh7wxSsQimpBxABI+ojHe5pYgUAswtTL07HJR9 yIQU4wJZ/DWZSWqHyQKMHSxMROWDT8fGgsfKmlQnHEI8ONLxkE/LuO75LFxNG6nD vVntJfB/JwIrJ9Tdjn9xgqzp1VKQr6DhOBXjXJIfM7xbG4uK76TWF6nfIoiiX1SS oqTpD2da53EZY51SRc4GSaxoiAz6lOQbhijt5IeaDQCXWqrp02nOCItyrGdQHijS Vt3Q48LBce/pF+LoqxkadSodkdG/mPY+y9QC1ZiAFowQxTKk8feLLHtOGaHDq7A= =qKrF -----END PGP SIGNATURE----- |