Notifications
Clear all

FreeBSD evidience

2 Posts
2 Users
0 Reactions
859 Views
Eagle
(@eagle)
Active Member
Joined: 20 years ago
Posts: 6
Topic starter   [#2369]

Hello All!
I have evidence with FreeBSD file system. Want to see log files without install FreeBSD.
Can anyone recommend solution of this problem?



   
Quote
azrael
(@azrael)
Honorable Member
Joined: 20 years ago
Posts: 658
 

FreeBSD can support multiple file systems, native though is UFS style.

You should be able to read the disk without problem in Autopsy/Sleuthkit. This supports UFS1/2 as well as most of the other possible file systems that FreeBSD might be able to use …

Commercially EnCase supports UFS, and I'm pretty sure that FTK does as well. WinHex does as well I believe.

Hope this helps a bit …



   
ReplyQuote
Share: