maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Translated ['src/generic-methodologies-and-resources/basic-forensic-meth

Browse Source
This commit is contained in:
Translator 2025-08-19 15:50:18 +00:00
parent 9ff4a3127e
commit d66eff6637
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/generic-methodologies-and-resources/basic-forensic-methodology/image-acquisition-and-mount.md
View File

@ -58,7 +58,9 @@ sudo ewfacquire /dev/sdb -u evidence -c 1 -d "Seizure 2025-07-22" -e 1 -X examin
aws ec2 create-snapshot --volume-id vol-01234567 --description "IR-case-1234 web-server 2025-07-22" aws ec2 create-snapshot --volume-id vol-01234567 --description "IR-case-1234 web-server 2025-07-22"
# Copy the snapshot to S3 and download with aws cli / aws snowball # Copy the snapshot to S3 and download with aws cli / aws snowball
``` ```
*Azure* – 使用 `az snapshot create` 并导出到 SAS URL。请参见 HackTricks 页面 {{#ref}} *Azure* – 使用 `az snapshot create` 并导出到 SAS URL。请参阅 HackTricks 的页面：
{{#ref}}
../../cloud/azure/azure-forensics.md ../../cloud/azure/azure-forensics.md
{{#endref}} {{#endref}}
@ -143,7 +145,7 @@ kpartx -dv /dev/loop0 # or qemu-nbd --disconnect /dev/nbd0
``` ```
## 参考 ## 参考
- AFF4 成像工具公告与规格: https://github.com/aff4/aff4 - AFF4 成像工具公告与规范: https://github.com/aff4/aff4
- qemu-nbd 手册页（安全挂载磁盘映像）: https://manpages.debian.org/qemu-system-common/qemu-nbd.1.en.html - qemu-nbd 手册页（安全挂载磁盘映像）: https://manpages.debian.org/qemu-system-common/qemu-nbd.1.en.html
{{#include ../../banners/hacktricks-training.md}} {{#include ../../banners/hacktricks-training.md}}