Advanced mounting of dd & EWF images using ewfmount - Linux Command Line tutorial forensics - 20
Linux Command Line tutorial for forensics - 20 - Advanced Mounting of dd & EWF images using ewfmount
♥️ SUBSCRIBE for more videos: https://www.youtube.com/bluemonkey4n6...
Difficulty Level: Intermediate
Prerequisites:
basic understanding of linux command line
basic understanding of the mounting command
In this video we will look at mounting drive images in the raw format or EWF format. We will also look at how to convert a E01/EWF formatted file to a dd/raw format.
Video timeline
00:00 intro
01:20 ewfexport - converts between file formats EWF and raw
02:15 ewfinfo - shows metadata stored in EWF files
02:35 mount -o loop,offset=NNN - mounting a loop device
07:03 ewfmount - converting EWF files to virtual dd
10:23 recap
⭕️ For other videos about the Linux command line, see other videos in this series: • Linux Command Line tutorial
Linux distro:
CAINE linux (http://www.caine-live.net)
Virtualization software:
Virtual Box (http://virtualbox.org)
Images used for examination:
Computer Forensic Reference Data Sets (CFReDS) from NIST (https://www.cfreds.nist.gov/data_leak...)
This course was designed to provide information on how to use the command line environment in a Unix/Linux system to accomplish tasks such as imaging, data acquisition, and archiving. This course covers the basics of Unix/Linux commands that allow users to view and edit text files, obtain hardware and system information, partitioning and formatting, process related commands, manipulating disks and partitions, imaging, archiving, logical acquisition, live system response, and basic networking.
This would be beneficial for folks who are interested in digital forensics, incidence response, system administration, ethical hacking, or just plain linux. This course covers material for beginners as well as for advanced users. This course would also be helpful if you are considering taking the CompTIA Linux+ certification test.
#dfir #linux #ewftools