CHFI1/wk2_lab1.md


1
2
3
4
5
6

1. /etc/network/interfaces
2. istat -f ntfs "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" 1
3. 4 KB
4. fls -m 63 "E:\CHFI-Tools\Evidence Files\Forensic Images\Windows_Evidence_001.dd" > body.txt
5. 25 50 44 46