Using sorter to pull unknown files

View: New views
1 Messages — Rating Filter:   Alert me  

Using sorter to pull unknown files

by Nathan Welch :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hello all,

I am using sorter to extract all the files from an NTFS raw image but I cannot get it to pull out files flagged as "unknown". I am not using the '-U' flag and I get hits in the 'unknown.txt' file but they don't actually get extracted. Is there anything that I am doing wrong?

I am using the sorter that came with the source package for sleuthkit 3.0.1 and I am running it on a Fedora 10 machine. The command I am entering is:

sorter -s -d /mystoredir/ -n mynsrlfile -o 63 -f ntfs mydrive.dd

Thanks,
Nathan



------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
sleuthkit-users mailing list
https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
http://www.sleuthkit.org