

ProDiscover automates many acquisition functions, unlike current Linux tools.

#Prodiscover basic free how to
In Chapter 2, you learned how to acquire an image of a USB drive. Exercise 3 - Capturing an Image with ProDiscover Basic Exercise 2 - Acquiring Data with dd in Linuxįollow these steps to make an image of an NTFS disk on a FAT32 disk by using the dd command.
#Prodiscover basic free mac os x
For information on Mac OS X file systems and acquisitions, see Chapter 7. You can download this driver from, where you can also find information about NTFS and instructions for installing the driver. Linux kernel version 2.6.17.7 and earlier can format and read only the FAT file system, although an NTFS driver, NTFS-3G, is available that allows Linux to mount and write data only to NTFS partitions. Current Linux distributions can create Microsoft File Allocation Table (FAT) and New Technology File System (NTFS) partition tables. The Linux OS has many tools you can use to modify non-Linux file systems.
