Analysing the byte entropy of a FAT formatted disk
Posted by Tariq • Tuesday, January 27. 2009 • Category: Forensics
Over at the Honeynet Project they used to run security competitions which were quite a bit of fun. I remembered one in particular which I looked at but hadn't completed. It dealt with the forensic investigation of a floppy disk. I was tinkering with an application to measure byte entropy and thinking of a way that it could be used in a forensic investigation. There is no point using the little application to analyse my terabyte (TB) sized drives so remembering the floppy disk challenge I downloaded the floppy disk image (1.44MB;MD5 = b676147f63923e1f428131d59b1d6a72).
Continue reading "Analysing the byte entropy of a FAT formatted disk"
Fri, 16.07.2010 21:48
Nvm my last comment, it works for 7.... but when i [...]