Difference between pages "Disk image" and "Scalpelcp"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(New page: Creating a disk image is important in forensics prior to analyzing anything in order to ensure that disk information is not inadvertantly changed during analysis. By performing an origina...)
 
(New page: ScalpelCp is a simple perl script that processes the logfile of scalpel run in preview mode on a CarvPath file and populates the output directory with symbolic links to CarvFs Carv...)
 
Line 1: Line 1:
Creating a disk image is important in forensics prior to analyzing anything in order to ensure that disk information is not inadvertantly changed during analysis.  By performing an original disk image and storing the original disk, it is possible to reproduce forensic test results with an exact reproduction of analysis methods.
+
ScalpelCp is a simple perl script that processes the logfile of [[scalpel]] run in preview mode on a CarvPath file and populates
 +
the output directory with symbolic links to [[CarvFs]] CarvPaths.

Revision as of 13:52, 12 December 2008

ScalpelCp is a simple perl script that processes the logfile of scalpel run in preview mode on a CarvPath file and populates the output directory with symbolic links to CarvFs CarvPaths.