Forums
Main Category
General (Technical,...
Unknown icon in enc...
 
Notifications
Clear all

Unknown icon in encase v6

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by _nik_ 18 years ago
6 Posts
3 Users
0 Reactions
625 Views
RSS
 cloudy
(@cloudy)
Trusted Member
Joined: 18 years ago
Posts: 59
Topic starter 21/06/2007 6:57 pm  

Hi

I am investigating a vista hdd and when i look through the folders in encase i see a number of them with a little hard drive and a little yellow box in the top left, does anyone know what this means?? It is Vista Home Premium

Many Thanks

Cloudy


   
Quote
JonN
 JonN
(@jonn)
Trusted Member
Joined: 20 years ago
Posts: 73
21/06/2007 7:10 pm  

Are you on the EnCase boards?

If so look at this post…..

https://messageboards.guidancesoftware.com/showthread.php?t=30486

If not, one of their Technical Support Specialists posted this link, which I assume explains what the icon means…..

http//en.wikipedia.org/wiki/NTFS_junction_point

Hope this helps

Jon


   
ReplyQuote
 cloudy
(@cloudy)
Trusted Member
Joined: 18 years ago
Posts: 59
Topic starter 21/06/2007 7:22 pm  

Thanks for that.

So its a NTFS symbolic link - basically its a link/pointer to the data?


   
ReplyQuote
_nik_
 _nik_
(@_nik_)
Trusted Member
Joined: 19 years ago
Posts: 93
21/06/2007 11:11 pm  

Yes that icon is a junction point/symbolic link.
it does point to another directory; it is used under vista
"Documnets and Settings" -> Users
there is a column in EnCase that shows the target.


   
ReplyQuote
 cloudy
(@cloudy)
Trusted Member
Joined: 18 years ago
Posts: 59
Topic starter 22/06/2007 1:54 pm  

_nik_

Cheers for that

Where is the column that shows the target?


   
ReplyQuote
_nik_
 _nik_
(@_nik_)
Trusted Member
Joined: 19 years ago
Posts: 93
22/06/2007 11:09 pm  

Where is the column that shows the target?

It's in the Table View and It's called "Symbolic Link"


   
ReplyQuote
Forum Jump:
  Previous Topic
Next Topic  
Share: