How to Install and Uninstall forensics-samples-ntfs Package on Ubuntu 21.10 (Impish Indri)

Last updated: December 23,2024

1. Install "forensics-samples-ntfs" package

This tutorial shows how to install forensics-samples-ntfs on Ubuntu 21.10 (Impish Indri)

$ sudo apt update $ sudo apt install forensics-samples-ntfs

2. Uninstall "forensics-samples-ntfs" package

This is a short guide on how to uninstall forensics-samples-ntfs on Ubuntu 21.10 (Impish Indri):

$ sudo apt remove forensics-samples-ntfs $ sudo apt autoclean && sudo apt autoremove

3. Information about the forensics-samples-ntfs package on Ubuntu 21.10 (Impish Indri)

Package: forensics-samples-ntfs
Architecture: all
Version: 1.1.4-2
Multi-Arch: foreign
Priority: optional
Section: universe/utils
Source: forensics-samples
Origin: Ubuntu
Maintainer: Ubuntu Developers
Original-Maintainer: Debian Security Tools
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 29639
Depends: forensics-samples-tools
Suggests: forensics-samples-all, forensics-samples-btrfs, forensics-samples-exfat, forensics-samples-ext2, forensics-samples-ext4, forensics-samples-files, forensics-samples-multiple, forensics-samples-vfat
Filename: pool/universe/f/forensics-samples/forensics-samples-ntfs_1.1.4-2_all.deb
Size: 30310980
MD5sum: 824720fac03f968ca618ea44e386e21e
SHA1: 20cf60c1508aad1d22b12d7c8b293510e0e0010f
SHA256: 5be2967c43d3f86d563d83b32d3b88735057fd5053ddef560d08c3d6403627f2
SHA512: c4bf84f9238ad4f7920ac8ceeb0c015ec071082fa08905a30e32d328dca15857621e2a4c32be5cfd1ef16fb84faf18670f183d84ea8dc7134cbafec3a0dc1f58
Homepage: https://github.com/eribertomota/forensics-samples
Description-en: Set of files to help learn/test forensics tools and techniques (ntfs)
forensics-samples is a set of useful files to help to learn or test forensics
tools and techniques. These files are examples of pictures, filesystems and
other possible artifacts as memory dumps (not available yet).
.
forensics-samples is useful for students and CI tests. The main intent of this
work is provide a standardized set of files to avoid time waste in some tasks
when learning about forensics or testing tools.
.
There are some filesystem images available (currently: ext2, ext4, btrfs,
NTFS, FAT2 (vfat) and exFAT). Inside each filesystem image, all files from
"original-files" directory were copied and, after this, all directories ending
with "2" in their names were deleted. Is possible use tools to analyse the
files and their metadata or carvers to recover deleted files.
.
On Debian, forensics-samples also is useful to provide files to be used by
other packages in CI tests (autopkgtest), making several source-packages
smallest (e.g.: metacam, ext4magic, foremost, magicrescue, disktype, etc).
All you need is use it as a dependency for your test in
debian/tests/control file.
.
This package provides an image of an NTFS filesystem.
Description-md5: 0abb25383563cc628f1af77982a6da3b