Re: SPAM: 99.9: Re: [sleuthkit-users] Autopsy: File Activity Timelines not working
Brought to you by:
carrier
|
From: <gim...@we...> - 2006-03-07 19:46:20
|
On Mon, 6 Mar 2006 20:25:43 -0500 Brian Carrier <ca...@sl...> wrote: > Your partition table is screwed up. TSK / Autopsy don't provide any > tools to help fix that. You can use a tool like testdisk or gpart > to see if the FAT file system exists somewhere on the disk. > You got it, i tried a simple "fdisk -l image.img" and then i got very clearly message something is wrong with image. I looked at both tools, but gpart seems to be out of date and didn't compile. It's provided static binary doesn't run, too. But never mind, testdisk is a very interesting tool... Thanks. |