Hi….
is there is any forensic software's which are compact able of opensolaris as it uses ZFS which is relatively new file system.. Pls help…………
by
joe………
EnCase lists it as supported. Not sure about FTK or XWF since they don't list it.
In case you hadn't seen already
http//
Joe -
What are you looking to do? You may not need a "forensic application".
Cheers!
farmerdude
.
hi guys,
thnks for comments………
Iam Forensic Computing student as part of the course i have been given a crime to investigate which uses open solaris OS for the clients…
we did create dd image off HD and were trying to mount it both manually and using forensic softwares which became a trobule as ZFS file system is not recognisable for most of forensic tools except (Encase 6.5 which is out of reach of our hands)….
if any one know to deal with this ZFS a help will be greatly appreicated…
thanks
joe
Find a linux distro that supports ZFS, mount the image and then share over SAMBA if you need to access it from Windows.