Dear all, I hope the post is not too far from the topic. I am helping my friend to recover data from a damaged harddisk. Since our goal is just to get back the...
Hi Kenneth If it's mechanical failure you are really looking at hardware intervention. Software can't bypass a damaged motor or broken circuit for instance. If...
kern
kern.uk@...
Mar 2, 2008 5:03 pm
2677
... intervention. ... run the ... may not ... looking to ... that. ... the image ... sometimes. ... Thanks Kern! I also think that my friend should go for a...
Is it possible to mount split dd images as a loopback device, or must I cat to build a single contiguous file? I checked past messages, and it looks like I've...
John, Despite I could not see it working yet, pyFLAG has the ability to mount splitted dd images, and the new versions allow to mount it using one of its ...
Good evening, Fow several months now an Italian team has been creating what will represent the heir of the interface Autopsy. The new project is called PTK and...
Public DFLabs Team
public@...
Mar 7, 2008 2:57 pm
2681
Can you give us the link for downloading it? ;) Thanks ... Dott. Nanni Bassetti Consulente Information Security Socio CLUSIT, AIPSI e IISFA ...
Looks like there is no download yet, but the docs are there.
http://ptk.dflabs.com/download.html
________________________________
From:...
Daniel, Adam (AU - Sy...
addaniel@...
Mar 8, 2008 5:05 am
2684
There is a graphic, but have you been able to get that page to download the document? I don't see a link in the HTML: <tr> <th height="50" bgcolor="#f2f2f2" ...
... must I cat to build a single contiguous file? John, Play around with mdadm and linear raid. I've mounted split images in this manner (using multiple...
Hi all, I'm trying to figure out a way for analysing/auditing usb storage device activity on a fedora8. Is there any way I can identify which files may have...
Could we do this thing? use encase, generate encase ewf, than convert it to dd, using libewf again then using vditoo to convert it to vdi file ( virtualbox),...
Hi, Ant. Please let me know what you find. This sounds like an interesting tool to create. ... [Non-text portions of this message have been removed]...
1. I have produced a modified version of Sleuthkit-2.51 which works with LIBEWF and AFFLIB. (The current version works with neither). As you know, Sleuthkit ...
I downloaded three of the NSRL hash sets in .iso format this weekend. I wanted to create a hash set for use with sleuthkit. I ran into trouble unzipping one...
Why are you unzipping? What do you want to do with these hash sets? We just use them from the compressed file directly... ... [Non-text portions of this...
I worked out the decompression problem. I used 7za, which failed a sha1 on the 3.3gb when I extracted all the files in the archive, but succeeded when I...
Hello, I've recently downloaded the most recent distro of Helix from two different sites. I've saved onto my hdd and then burned a start-up disk from my iso. ...
Mike, Wow. Not sure where to begin. I think you meant the e-fense Helix forums which are located at http://www.e-fense.com/helix/forum. As far as the forum...
Drew, Wow. Thanks for the quick response. I will take a look at the hash and see if the problem is there. Didn't know about the burn speed either - another ...
Mike, I've gotten the same message with Helix 1.9 and am also clueless. I do have an ISO image of Helix 1.8 if you're interested. John Riley From:...
Riley, John H
jriley@...
Mar 11, 2008 5:56 pm
2699
John, FYI I did just run MD5 against my Helix app and it did not match with the MD5 listed on the web page. Maybe it has something to do with the burn speed. ...
I have a question for Andrew.... why the Sleuthkit tools can't be launched from everywhere in Helix? I tried to run mmls or fls from the terminal windows and...
FYI Reference to the latest Helix distro: Went home and downloaded the iso again. Checked MD5 and ity matched. Made my cd at 8x. Put it in a laptop, started it...
Hi, Try doing a md5 hash first on the .iso images (to check their integrity) before burning them to a cd and booting them ! Regarding error 25 - it refers to a...
Alfred Tims
timsal-1@...
Mar 12, 2008 9:35 am
2704
... Yes....I knew it... :) but why is it not set? It can be useful and confortable IMHO :) If is it possible can you set into the next release? Thanks ... ...