Notifications
Clear all

FreeBSD evidience

2 Posts
2 Users
0 Reactions
664 Views
Eagle
(@eagle)
Active Member
Joined: 19 years ago
Posts: 6
Topic starter  

Hello All!
I have evidence with FreeBSD file system. Want to see log files without install FreeBSD.
Can anyone recommend solution of this problem?


   
Quote
azrael
(@azrael)
Honorable Member
Joined: 19 years ago
Posts: 656
 

FreeBSD can support multiple file systems, native though is UFS style.

You should be able to read the disk without problem in Autopsy/Sleuthkit. This supports UFS1/2 as well as most of the other possible file systems that FreeBSD might be able to use …

Commercially EnCase supports UFS, and I'm pretty sure that FTK does as well. WinHex does as well I believe.

Hope this helps a bit …


   
ReplyQuote
Share: