cain live cd 1.5 and Autopsy

View previous topic View next topic Go down

cain live cd 1.5 and Autopsy

Post  fever on Wed Dec 16, 2009 3:27 pm

Hi,

I downloaded and installed cain 1.5 to my computer yesterday and started to have a play around. I have a image of a floppy disc drive that i have been using in FTK. I decided to check out the cain live cd specifically Autopsy, I added a new case and added my image but when i went to analysis the image i just had a bar at the top and when i clicked the options at the top nothing much happened.

Is there something I set up wrong ?

fever

Number of posts : 1
Registration date : 2009-12-16

View user profile

Back to top Go down

Re: cain live cd 1.5 and Autopsy

Post  denis on Wed Dec 16, 2009 11:33 pm

when you want analyze image using autopsy, you've to chose if work on devide or on partition. In the first case you can't explore the file system, because you are working on the intere device.
To learn more about autopsy:
-- A Step-by-Step introduction to using the AUTOPSY Forensic Browser (http://sansforensics.wordpress.com/2009/05/11/a-step-by-step-introduction-to-using-the-autopsy-forensic-browser/) ,
-- The Sleuth Kit v2.01 and Autopsy Forensic Browser Demonstration - Anthony Dowling - 2 giugno 2006 (http://www.denisfrati.it/pdf/TSK_v201_Demonstration.pdf);
-- Digital Forensics: A Demonstration of the Effectiveness of The Sleuth Kit and Autopsy Forensic Browser - Anthony Dowling - 14 maggio 2006 - (http://www.denisfrati.it/pdf/ADowling_Thesis_Digital_Forensics_TSK.pdf);

denis

Number of posts : 52
Località : Torino, Italy
Registration date : 2008-10-27

View user profile http://www.denisfrati.it

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum