mikas blog » Blog Archive » ldmtool: accessing Microsoft Windows dynamic disks from Linux
Linux is a great platform for dealing with all kinds of different file systems, partition tables etc. But one of the few annoying situations when working in IT forensics are Microsoft Windows dynamic disks, AKA LDM (Logical Disk Manager). Thanks to libldm’s ldmtool this is no longer true. A short demonstration from a real-life IT forensics investigation (actual IDs/data randomized for obvious reas
全般 FAQ
 ForensicsAQ [FAQトップ] [EnCase FAQ] [全般 FAQ] [ãã®ä»–] [Ji2] カテゴリ：全般 FAQ GA_I001 Windowsã§ä½¿ãˆã‚‹ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯ç”¨ã®DDコマンドã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ GA_I002 Linuxã§ä½¿ãˆã‚‹ãƒ•ã‚©ãƒ¬ãƒ³ã‚¸ãƒƒã‚¯ç”¨ã®DDコマンドã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ GA_I003 MAC Timeã¨ã¯ä½•ã§ã™ã‹ï¼Ÿ GA_I004 日本語文å—列ã®16進数パターンを表示ã™ã‚‹ã«ã¯ï¼Ÿï¼ˆCPCONV) GA_I005 日本語文å—コードã«å¯¾å¿œã—ãŸstringsコマンドã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ GA_I006 フォレンジックã§åˆ©ç”¨ã§ãる起動用Linux CD-ROM GA_I007 フォレンジックã§åˆ©ç”¨ã§ãる起動用WindowsPE CD-ROM GA_I008 日付データã®å¤‰æ›ãƒ„ール GA_I009 ファイルã®å¾©å…ƒãƒ„ール GA_I010 ãƒãƒ¼ãƒ‰ãƒ‡
ForensicsWiki
This is the Forensics Wiki, a Creative Commons-licensed wiki devoted to information about digital forensics (also known as computer forensics). We currently list a total of 954 pages. Much of computer forensics is focused on the tools and techniques used by investigators, but there are also a number of important papers, people, and organizations involved. Many of those organizations sponsor confer
1
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}