solve problems with Computer Forensics

dowload the first data to be in the analysis,,

mkdir ~/evid
used to create a directory with the command
mkdir /mnt/analysis
used to create a folder diadalam directory that will be used to accommodate data...


fdisk -l /dev/hdc
command is used to determine struktir disk, in this case is used to view the structure ofthe file to be in forensics.



fdisk -l /dev/hdc > ~/evid/fdisk.disk1


this is used to make the output to be in pindahakan filae,,,
so that the data to be transferred later does not change.


cd evid
dd if=/dev/fd0 of=image.disk1 bs=512
and here in the input file needs to be used to input data to be in forensics.


chmod 444 image.disk1
used to view users that lelihat that the data can actually be viewed.


dd if=image.disk1 of=/dev/fd0 bs=512
at this stage I began to copy the actual data in order not to be confused.


mount -t vfat -o ro,noexec /dev/fd0 /mnt/analysis
then copying the data to the folder that you have made initial.


umount /mnt/analysis
at this stage is used to meliaht directorry folder.


mount -t vfat -o ro,noexec,loop image.disk1 /mnt/analysis


To be continued,,,,,,