diff options
Diffstat (limited to 'CHFI1/wk3_lab1.md')
| -rw-r--r-- | CHFI1/wk3_lab1.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/CHFI1/wk3_lab1.md b/CHFI1/wk3_lab1.md new file mode 100644 index 0000000..c735277 --- /dev/null +++ b/CHFI1/wk3_lab1.md @@ -0,0 +1,6 @@ +1. xmount --in ewf Windows_Evidence_001.E01 /home/jason/Documents +2. 8 +3. dd if=/dev/fmem of=/home/james/Documents/test_ram.dd bs=1MB +4. NTFS +5. 346849 +6. disk_analysis.py |