Day-4

 Positive Day -4

Paladin LTS, EDGE 32/64 မှာ Support လုပ်တဲ့ Image Type များ 

DD (Raw)

EWF v1 (Expert Witness Format)

EWF v2

SMART (ASR data Image Format)

DMG (Apple Disk Image) 

VMDK (Use For Virtual View )

(Forensics Mode နဲ့ Live လုပ်တဲ့အခါ Computer ထဲကို ချိတ်ဆက်တဲ့ Storage Media တွေက Read Only Mode အနေနဲ့ ဖြစ်သွားမှာ ဖြစ်ပါတယ်။)

Support လုပ်တဲ့ Function တွေကတော့ 

- Forensics Imaging 

- Cloning  The Drive

- Imaging Across The Network 

   (NAS,Raid ရှိခဲ့လျှင်)

- Converting Forensics Image Type to Another Forensics Image Type

- Imaging Unallocated Space and unpartation  Space



Comments

Popular posts from this blog

NTFS Index Attributes

B-Trees (NTFS)

eCDFP (Module-6) (Window Forensics) (Part - 1 )