Linux

forensique

EWF

Installer

apt install ewf-tools

Acquerir une image

ewfacquire -t

Monter l’image

sudo ewfmount /media/did64/CSP\ Alfortville/ORDI_ICC/image.E01 /home/did64/icc/ sudo mmls ./icc/ewf1 sudo mount -t ntfs-3g -o loop,ro,show_sys_files,stream_interface=windows,offset=$((1323008*512)) ./icc/ewf1 ./windows