EnCase can't recognize Chinese characters filenames on Linux

gorvq7222 · 2015-05-24T12:06:20Z

Hi,Last week my friend brought me an evidence file duplicated from a Linux server, which distribution is CentOS 5.0 and the i18n is zh-tw. She wanna know whether there is any malware on this Linux server or not. OK. Let's get to work. I add this evidence and do Evidence Process. Guess what??? EnCase could not recognize Chinese character folder names / filenames, and those folder names / filenames become Hieroglyphics. I am very disappointed and don't know what to say to my friend… I guess I have to explain why EnCase may need night vision goggles when examining Linux platform evidence files. It's too ridiculous!You guys could take a look at my blog to see what's going on.http//www.cnblogs.com/pieces0310/p/4525846.htmlNeedless to say, my friend also could not believe the #1 forensic tool - EnCase should have problems like that. Fortunately I still have another options like FTK or X-Ways Forensics to take over this case. You guys could take a look at screenshot in my blog. I mount these evidence files by using FTK Imager Lite. You could see the Chinese character folder names / filenames now. I'd like to remind you that FTK Imager Lite is a free tool…

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by EricZimmerman 10 years ago

11 Posts

7 Users

0 Reactions

1,988 Views

RSS

EricZimmerman

(@ericzimmerman)

Estimable Member

Joined: 13 years ago

Posts: 222

12/06/2015 9:10 pm

you have access to X-Ways. just use that and be done with it.

ReplyQuote

Page 2 / 2 Prev

Article: The Balance Between Digital Forensic Examiners And Digital Evidence Technicians: Expertise Vs. Efficiency

Can digital forensic labs cut backlogs without cutting ...

By Zoe , 21 hours ago
Prefetch Question

Hello All, I have a question regarding Windows prefet...

By Forensic_Tester , 1 day ago
Webinar: Collaborative Forensics: Overcoming Challenges In Multi-Jurisdictional Investigations

Discover expert strategies for cross-border investigati...

By Zoe , 1 week ago

8 Forums
15.7 K Topics
92.3 K Posts
176 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed