FreeBSD
This section describes how to set up a FreeBSD system as a disk imaging system.
Install FreeBSD 6.2 on a new computer
- Boot the FreeBSD 6.2 CDROM
- Hit return to boot the Default
- Hit return to select "United States" (or choose your country)
- Hit down-arrow and hit return to select "standard install"
Setting up the partition table:
- Enter to select "OK." If the geometry is incorrect, enter "OK" to accept.
- If there are any partitions, use the up and down arrows to select them and press "d" to delete them.
- press "a" to use All of the disk.
- press "q" to finish
- press the down arrow and hit Enter to select the Standard MBR (no boot manager)
Setting up the FreeBSD partitions:
- Press "enter" at the OK prompt.
- Press "a" for auto-defaults
- Press "q" to accept
Choosing what to install:
- Press the down arrow and Enter to select "all" software
- Press Enter at the "yes"
- Press the up arrow and press Enter to Exit
- Press Enter to select CD/DVD
- Press Enter to confirm
FreeBSD 6.2 will be installed. Now you need to configure it.
- Press Enter at the OK prompt when installation is complete.
- Press [Yes] Enter to configure an Ethernet address.
- Press [Ok] Enter to configure the first ethernet card.
- Press [No] Enter when asked if you want to configure an IPv6 interface.
- Press [Yes] Enter when asked if you want to configure with DHCP.
- Press [No] Enter when asked if you want to be a network gateway.
- Press [No] Enter when asked if you want to configure inetd.
- Press [No] Enter when asked if you want to enable SSH login.
- Press [No] Enter when asked if you want to have anonymous FTP.
- Press [No] Enter when asked if you want to configure the machine as an NFS server.
- Press [No] Enter when asked if you want to configure the machine as an NFS client.
- Press [No] Enter when asked if you want to customize the system console settings.
- Press [Yes] Enter when asked if you want to set the machine's time zone.
- Press [No] Enter when asked if the machine's system clock is in UTC.
- Select your region and press [OK] Enter
- Select your country and press [OK] Enter
- If you are in the US, Select your time zone and press [OK] Enter
- Press [Yes] Enter to confirm the time zone.
- Select [No] Enter when asked if you need Linux compatibility.
- Select [No] Enter when asked if you have a mouse (even if you have one).
- Select [No] Enter when asked if you wish to browse the ports collection.
- Select [No] Enter when asked if you wish to add any user accounts.
- Press [OK] Enter when told you will be setting the Root password
- Press [Enter] for the Root password; we will use no password.
- Press [Enter] to confirm the empty root password.
Getting Your Forensics Software Working for local analysis
Note that the order you do this matters: Sleuth Kit won't compile with AFFLIB support unless AFFLIB is installed on your system.
- Download and install libewf if you want EnCase support.
- Download and install [AFFLIB](aff.md
- Download and install The Sleuth Kit from http://www.sleuthkit.org/
- Download and install fiwalk