CAINE LiveCD
Would you like to react to this message? Create an account in a few clicks or log in to continue.

cain live cd 1.5 and Autopsy

2 posters

Go down

cain live cd 1.5 and Autopsy Empty cain live cd 1.5 and Autopsy

Post  fever Wed Dec 16, 2009 3:27 pm

Hi,

I downloaded and installed cain 1.5 to my computer yesterday and started to have a play around. I have a image of a floppy disc drive that i have been using in FTK. I decided to check out the cain live cd specifically Autopsy, I added a new case and added my image but when i went to analysis the image i just had a bar at the top and when i clicked the options at the top nothing much happened.

Is there something I set up wrong ?

fever

Number of posts : 1
Registration date : 2009-12-16

Back to top Go down

cain live cd 1.5 and Autopsy Empty Re: cain live cd 1.5 and Autopsy

Post  denis Wed Dec 16, 2009 11:33 pm

when you want analyze image using autopsy, you've to chose if work on devide or on partition. In the first case you can't explore the file system, because you are working on the intere device.
To learn more about autopsy:
-- A Step-by-Step introduction to using the AUTOPSY Forensic Browser (http://sansforensics.wordpress.com/2009/05/11/a-step-by-step-introduction-to-using-the-autopsy-forensic-browser/) ,
-- The Sleuth Kit v2.01 and Autopsy Forensic Browser Demonstration - Anthony Dowling - 2 giugno 2006 (http://www.denisfrati.it/pdf/TSK_v201_Demonstration.pdf);
-- Digital Forensics: A Demonstration of the Effectiveness of The Sleuth Kit and Autopsy Forensic Browser - Anthony Dowling - 14 maggio 2006 - (http://www.denisfrati.it/pdf/ADowling_Thesis_Digital_Forensics_TSK.pdf);

denis

Number of posts : 52
Località : Torino, Italy
Registration date : 2008-10-27

http://www.denisfrati.it

Back to top Go down

Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum