This repository includes reusable scripts derived from the practical work carried out for 'SCS 4213: Digital Forensics' course at UCSC.
All the scripts are written in Bash.
You may need to install some commands if your Linux distribution does not have them already installed. (e.g. dd, bc etc.) The commands used in the scripts are generally available on any distro. If you are getting errors on running things, install missing tools as required.
For starters run,
mbr.shto analyze the MBR entries on a disk.fat16.shto analyze a FAT16 partition image.ntfs.shto analyze a NTFS partition image.
A bunch of sample images are given by default.
The scripts itself are self-explanatory (However, you need to know how to read bash scripts).
If you do not understand anything here, this repository is probably not what you are looking for.
File System Forensic Analysis - Brian Carrier