Disk Images
- Bill Branan
Owned by Bill Branan
Jun 16, 2017
1 min read
Loading data...
User stories for disk images in repositories: https://docs.google.com/document/d/18njxk2brPxgqpIWyBojbXvEasBWui5vGbb1f3ESAmpg/edit#heading=h.n69gvljoq571
Samples of technical metadata produced by forensics tools (let's try to get several examples of each):
- BitCurator
- Bit Curator (1.3.3) DFXML from a raw image produced from 3.5 inch floppy (Penn State)
- BitCurator (1.3.1) DFXML from AFF disk image produced from USB thumb drive (Duke)
- BitCurator (1.3.1) DFXML from raw image produced from optical disc with HFS filesystem (Duke)
- FTK/FTK Imager
- FTK Imager (3.1.0.1514) verification file (txt) (Penn State)
- FTK Imager (3.1.0.1514) directory listing (csv) (Penn State)
- Kryoflux
- Kryoflux (2.2.0) log file from GUI (Duke)
- Kryoflux (2.0.0) log file from command line (Duke)
- Guymager
- Guymager (0.7.4-1) info file for raw image (Duke)