±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 36445
New Yesterday: 2 Visitors: 85

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

AIX raw image forensic

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

nalaka
Newbie
 

AIX raw image forensic

Post Posted: Jul 10, 15 15:41

Hi All,

Is there anyone who has conducted forensic analysis on AIX image. Even though Linux kernel supports JFS file system, I can't mount the raw AIX disk images in Linux. Is there any specific software we could use to mount the image or do forensic investigation on Linux or Windows?  
 
  

cvanaernam
Member
 

Re: AIX raw image forensic

Post Posted: Aug 12, 15 02:15

If you have access to EnCase we were able to get v6.19 to display the contents of a DD image of an AIX system. Once you add the raw image you need to right click on the evidence and then scan for LVM before the data presents itself.

The OS uses Logical Volume Management which abstracts the storage from the physical hardware. On top of LVM, AIX uses the JFS filesystem.  
 
  

Dmitri
Member
 

AIX data recovery

Post Posted: Aug 16, 15 05:25

We specialize in challenging RAID recoveries and I didn't see the tool, which could handle each and every AIX job properly. I think because AIX is quite an uncommon thing.

We have developed our own data recovery software, which supports AIX properly.
I need more info to tell about forensic analysis, but will be happy to help with recovery remotely.
Please feel free to contact me if necessary.  
 

Page 1 of 1