diff options
Diffstat (limited to 'CHFI1/wk2_lab1.md')
| -rw-r--r-- | CHFI1/wk2_lab1.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHFI1/wk2_lab1.md b/CHFI1/wk2_lab1.md new file mode 100644 index 0000000..3148058 --- /dev/null +++ b/CHFI1/wk2_lab1.md @@ -0,0 +1,6 @@ +1. /etc/network/interfaces +2. istat -f ntfs "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" 1 +3. 4 KB +4. fls -m 63 "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" > body.txt +5. 25 50 44 46 + |