Re: NTFS forensic analysis on Unix platform

• Previous message: Ariel Waissbein: "Re: Signature on logs/eMail"
• In reply to: mat_private: "NTFS forensic analysis on Unix platform"
• Next in thread: Frank Knobbe: "RE: NTFS forensic analysis on Unix platform"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The best tool in my opinion is still NTFSDOS, though the full version is not 
"open source".

Michael D. Barwise BSc, IEng, MIIE
Computer Security Awareness

"Addressing the Human Equation in Information Security"

>  Hi.
> 
>  I have taken 2 disk images from a compromised IIS system. 
> These images are in NTFS format, and I was wondering if 
> anyone knows of an open source tool which is capable of 
> accessing these partitions. The Unix platform that I have 
> available is OpenBSD; so I can't mount the NTFS partitions.
> 
>  In the past I've used tct; but unrm doesn't currently 
> support ntfs filesystems.   
> 
>  Any advice would be greatly appreciated. 
> 
> thanks,
> Marty. 
> 
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management 
> and tracking system please see: http://aris.securityfocus.com



-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

• Next message: Frank Knobbe: "RE: NTFS forensic analysis on Unix platform"
• Previous message: Ariel Waissbein: "Re: Signature on logs/eMail"
• In reply to: mat_private: "NTFS forensic analysis on Unix platform"
• Next in thread: Frank Knobbe: "RE: NTFS forensic analysis on Unix platform"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Jul 29 2001 - 09:14:03 PDT