#DFIR Activating Hivemind - Anybody got pointers to info on forensic exam/acquisition of EXT4 ? We've got Encase 6.18, FTK3 and Open Source.
@BryanTheSnail And of course Linux dd works as does mounting images via loopback.
Mar 31, 2011 · 10:28 PM UTC