Linux data forensics

[ghenry]

Just a quick heads up of something I did today, which I thought was worth a mention:

I had to recover some deleted files on a Windows 2000 box with a NTFS filesystem.

Tools:

Penguin Sleuth Bootable CD
UnxUtils
Netcat
Sleuth Kit and Forensic Browser
Putercops


Using dd to dump a 6GB image of a laptop hardrive via a crossover cable (to free up the network nadwidth) and netcat to another Windows 2000 box, then using the Penguin CD and autopsy/sleuthkit I got the files from the image.


I think I have a new howto for Fedoranews.org

[Ug]

Indeed you do.

[ghenry]

[mars_hall]

Please .... tell me how to work on windows computer from a Linux box. I am tired of cleaning viruses off of other's computer at the risk of my network

[ghenry]

Please could you start a new thread for this in Support, thanks.