Forensics
Mount a .bin file in Linux Nov 01 2006 06:10PM
clint robotic com (7 replies)
Re: Mount a .bin file in Linux Nov 06 2006 08:33PM
Erik Lat (erik lat lextech com)
Re: Mount a .bin file in Linux Nov 06 2006 07:40PM
Paul daSilva (pdasilva polr org)
Re: Mount a .bin file in Linux Nov 06 2006 03:32PM
johan knudde be
RE: Mount a .bin file in Linux Nov 06 2006 12:54PM
Oliver Gading (gading iuk-forensik de)
Re: Mount a .bin file in Linux Nov 05 2006 04:50PM
Alexander Klimov (alserkli inbox ru) (1 replies)
RE: Mount a .bin file in Linux Nov 07 2006 03:52AM
Gary Funck (gary intrepid com)
Re: Mount a .bin file in Linux Nov 05 2006 01:34PM
Barry J. Grundy (bgrundy imx hq nasa gov)
On Wed, 2006-11-01 at 18:10 +0000, clint (at) robotic (dot) com [email concealed] wrote:
> Help! I've created a .bin file of a Windows XP system using an X-Late
> HardCopy device (in image mode). I thought I could simply mount the
> image in Linux (I'm using Helix 0307) using:

First, I'm not at *all* familiar with the device you used or with the
format of a ".bin" file. I'm assuming it's a normal bit copy ("dd"
style). If the device puts an proprietary crap in the image, then all
bets are off. Having said that:

> # mount -o loop -t iso9660 image001.bin /media/test

1) If it's from a Windows XP system, then why is the fstype iso9660?

2) The loop driver is not partition aware. If this is a whole disk
image, and not a partition image, then the mount command will not
work.

Run mmls (or sfdisk -l -uS) on the image file to determine the start of
the partition you want to examine. Pass an offset to loop to that
partition. Normally, it's 63 sectors (*512 bytes/sector)

mount -t ntfs -o loop,offset=32256 image001.bin /media/test

--
/***************************************
Special Agent Barry J. Grundy
Resident Agent in Charge
NASA Office of Inspector General
Computer Crimes Division
Eastern Region
(301)286-3358 (w)r
(202)246-6497 (c)
**************************************/
! WARNING ! This email including any attachments is intended only for
authorized recipients. Recipients may only forward this information as
authorized. This email may contain non-public information that is "Law
Enforcement Sensitive," "Sensitive but Unclassified," or otherwise
subject to the Privacy Act and/or legal and other applicable privileges
that restrict release without appropriate legal authority and clearance.
Accordingly, the use, dissemination, distribution or reproduction of
this information to or by unauthorized or unintended recipients,
including but not limited to non-NASA recipients, may be unlawful.

[ reply ]
Re: Mount a .bin file in Linux Nov 05 2006 01:26PM
Ansgar -59cobalt- Wiechers (bugtraq planetcobalt net)


 

Privacy Statement
Copyright 2010, SecurityFocus