Recover server dele...
 
Notifications
Clear all

Recover server deleted logs using FTK

3 Posts
3 Users
0 Reactions
1,224 Views
(@rohitdharan)
Active Member
Joined: 8 years ago
Posts: 17
Topic starter   [#17905]

Hello All,

how to recover server deleted logs using FTK, and how to investigate who is deleted the logs?



   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 22 years ago
Posts: 3568
 

What type of logs, from what type of system? Syslog from a Linux system?



   
ReplyQuote
BraindeadVirtually
(@braindeadvirtually)
Estimable Member
Joined: 17 years ago
Posts: 115
 

First, you have to learn how to do digital forensics.

Then, take your image of the server and retry.



   
ReplyQuote
Share: