Has anybody on here had any first hand exerience with FTK and the Ftk Imager, reading, imaging and processing drives on a Novelle server.
I have a delicate situation and I'm not in a position to access the HDs in a Novelle Server without knowing in advance if I will be able to read, image or process them.
Thanks!
Imaging really isn't so much of an issue. I've used FTK to image a FreeBSD server, then opened it in EnCase as a UFS volume.
As far as processing the Novell file system, I'd (a) check to see what version they're running, and (b) contact AccessData directly via the phone.
H
Thanks!!
Acquiring an image won't be a problem, but viewing the file system using either EnCase or FTK will be as neither currently have support for Novell file system. Captain Nemo
echo6,
Beware using the software, though. If you image the Novell system, you'll have to restore that image to another drive so that you can then mount it under whichever OS you're using; make sure to (a) use a write blocker, and (b) never work on the original evidence.
Capt Nemo is NOT a version of EnCase or FTK that allows you to access the Novell file system…it's more of a version of Windows Explorer.