Group Information- Members: 910
- Category: Other
- Founded: Jan 12, 2008
- Language: English
Yahoo! Groups Tips
Did you know...
Message search is now enhanced, find messages faster. Take it for a spin.
|
Upcoming calendar upgrade: Yahoo! Groups calendars are being upgraded to a much improved version. You may not have access to the calendar (for up to 24 hours) when this group is upgraded. We sincerely apologize for this inconvenience.
Description
Windows Forensic Analysis is dedicated to sharing information pertinent to incident response and computer forensic analysis of the Windows NT+ family of operating systems. Topics can cover live response, forensic analysis, Registry or memory analysis, etc.
|
|
Posted - Sat May 26, 2012 7:41 pm
|
Sandro Suffert
sandro_suffert
 Offline
 Send Email
|
Re: 4k sectors, NTFS and the MFT
X-Ways has always been the Swiss Army knife of forensic tools. I have found that it is prone to crashes with large images on 64-bit systems but haven't been
Posted - Sat May 26, 2012 6:40 pm
|
Sean McLinden
sean.mclinden
Offline
Send Email
|
Re: 4k sectors, NTFS and the MFT
Which is why your recommendation to use X-Ways carries so much weight, haven't regretted it once. ... -- Robin Jackson Security+, CISSP, ITIL Senior Partner WT
Posted - Sat May 26, 2012 6:20 pm
|
Robin Jackson
wt4n6
Offline
Send Email
|
Re: 4k sectors, NTFS and the MFT
As expected, X-Ways Forensics handles the image just fine. It also looks as though Mount Image Pro 4.12 can mount the image. Jimmy Weg, CFCE Agent in Charge,
Posted - Sat May 26, 2012 5:20 pm
|
Weg, Jimmy
jimmyweg
Offline
Send Email
|
4k sectors, NTFS and the MFT
After the discussion Adam started the other day regarding 4k sector drives I did a bit of testing, I presented the results at the last DFIROnline (which will
Posted - Sat May 26, 2012 4:47 am
|
Mike Wilkinson
mike@...
Send Email
|
Add win4n6 to your personalized My Yahoo! page   What's This?
|
Message History
|
|
Related Link:
http://windowsir.blogspot.com
Post message:
win4n6@yahoogroups.com
Subscribe:
win4n6-subscribe@yahoogroups.com
Unsubscribe:
win4n6-unsubscribe@yahoogroups.com
List owner:
win4n6-owner@yahoogroups.com
|
