Positive Day -4

Paladin LTS, EDGE 32/64 မှာ Support လုပ်တဲ့ Image Type များ 

DD (Raw)

EWF v1 (Expert Witness Format)

EWF v2

SMART (ASR data Image Format)

DMG (Apple Disk Image) 

VMDK (Use For Virtual View )

(Forensics Mode နဲ့ Live လုပ်တဲ့အခါ Computer ထဲကို ချိတ်ဆက်တဲ့ Storage Media တွေက Read Only Mode အနေနဲ့ ဖြစ်သွားမှာ ဖြစ်ပါတယ်။)

Support လုပ်တဲ့ Function တွေကတော့ 

- Forensics Imaging 

- Cloning  The Drive

- Imaging Across The Network 

   (NAS,Raid ရှိခဲ့လျှင်)

- Converting Forensics Image Type to Another Forensics Image Type

- Imaging Unallocated Space and unpartation  Space


Popular posts from this blog

eCDFP (Data Representation & File Examination) (Part-5)

NTFS Index Attributes

A Case Study on Geoprofiling and Imagery Analysis