Identify the distro with a(few) file(s)
Hi all,
I received an hard-drive with an OS installed in it. I need to identify the OS installed in the hard-drive without running it. (forbidden by the process). I can mount it in readonly mode on another running sytem, but I can't boot directly on the hard-drive i received. Which file(s) could help me to identify the OS installed on the hard-drive ? Thanks |
If you can mount read-only, then mount the / directory and check in the /etc directory for a version file. It will usually be /etc/<vendor-name>-release
|
use the system rescue cd or a forensic cd
... the files required will be clear only if you fix your list of possible OS(s). |
Do you mean which OS, or which Linux OS?
for Linux, you can also sometimes get a clue in the /boot directory, /var (eg the package manager file in /var/lib), or /lib/modules |
This doesn't sound like a class lab to anyone else?
|
Quote:
|
Quote:
|
Code:
Do you mean which OS, or which Linux OS? However, as he is not into Uix/Linux, he is not making any difference in between them. However, i noticed the filesystem is a 44BSD: so it could be open/net/free bsd. I am not used of BSD systems. You know how I can recognize which system is installed ? Thanks |
Quote:
If it's a forensic analysis you are looking for, then say so. I may be able to help, as I have had some success with this sort of thing in the past. |
Code:
Exactly why is it "forbidden"? To understand what is wrong in the system hosted in the hard-drive, you need the keep the system as it was when it crashed. |
All times are GMT -5. The time now is 01:50 AM. |