Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20112

General Discussion: Evidence Disk for Class Purposes

$
0
0
Get multiple partitions on a USB (unusual), make first bootable, and NTFS, the second one HFS+ and then hide it. Create complex fragmentation in both partitions. Create decoy $MFTs and other partial NTFS structures.

Viewing all articles
Browse latest Browse all 20112

Trending Articles