Skip to content

Import logs from a mounted drive #3

Open
@S3mprGumb1

Description

@S3mprGumb1

Importing logs from the currently running system is great, but the ability to import logs from an offline disk is critical to a forensic investigation. This issue consists of two parts: Importing from a mounted drive, and importing from an offline NTFS disk, using the MFT to locate the log files.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions