coelner/hacktricks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

GitBook: [master] one page modified

Browse Source
This commit is contained in:
CPol 2020-12-28 20:16:44 +00:00 committed by gitbook-bot
parent c8c62a9343
commit 8ede9a6af2
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
forensics/basic-forensics-esp/linux-forensics.md
View File

@ -330,15 +330,21 @@ Every block group contains the following pieces of information:
### Ext Optional Features
**Features affect where** the data is located, **how** the data is stored in inodes and some of them might supply **additional metadata** for analysis, therefore features are important in Ext.
Ext has optional features that your OS may or may not support, there are 3 possibilities:
* Compatible
* Incompatible
* Compatible Read Only: It can be mounted but not for writing
```bash
If any of the features is **incompatible and essential** you won't be able to mount the filesystem as the OS won't know how the access the data.
{% hint style="info" %}
Suspected attacker might have non-standard extensions
```
{% endhint %}
**Any utility** that reads the **superblock** will be able to indicate the **features** of a **Ext filesystem**, but you could also use `file -sL /dev/sd*`
### Superblock