ext4-forensics

IMAGE FOR EXT4 FILE SYSTEM FORENSICS

1) Download the files required for the project

2) Extract the raw image from 'image1.tar.xz' using the following command

# tar -xf image1.tar.xz

3) Download 'hash.txt' to the same folder as the raw image

4) Verify if the hash of the downloaded image matches that in 'hash.txt', using

# md5sum image1.dd > check_hash.txt
# md5sum -c check_hash.txt hash.txt