ZFS forensic tools

From: Gashaw Mengistu (gashaw@marylandpilots.org)
Date: Tue May 01 2007 - 12:04:27 EDT

• Next message: Bill Bradford: "SUMMARY: DDS-3 drive configuration on Sol10"
• Previous message: Che-Ming (Tom) Chang: "Any solaris application may send out ARP contain sounce mac 0000.0000.0000"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello all,

Is there anything that can be used to do forensics on ZFS? I understand
the sleuth kit/EnCase, etc don't work with ZFS.

Thanks.
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

• Next message: Bill Bradford: "SUMMARY: DDS-3 drive configuration on Sol10"
• Previous message: Che-Ming (Tom) Chang: "Any solaris application may send out ARP contain sounce mac 0000.0000.0000"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:41:55 EDT