I have tried the cmd "ftkimager --verify C:\Daubert Standard Evidence\Image1\Evidence_drive1.001 " and commands related to this but it keeps not recognizing the command saying unexpected parameter to my file I put in the command that I am trying to retrieve the hash from. Any help is appreciated, thank you!
"Using the Internet, research the command line version of FTK Imager and identify the command used to generate SHA1 and MD5 hashes for a specific file. Next, launch a Command Prompt window and navigate to the FTK Imager CMD tool (C:\Program Files\AccessData\FTK Imager\cmd\). Use the command you identified in your research to verify the SHA1 and MD5 hashes of the Evidence_drive1.001 file used in this lab."
I have tried the cmd "ftkimager --verify C:\Daubert Standard Evidence\Image1\Evidence_drive1.001 " and commands related to this but it keeps not recognizing the command saying unexpected parameter to my file I put in the command that I am trying to retrieve the hash from. Any help is appreciated, thank you!
coommand i try is
d C:\Program Files\AccessData\FTK Imager\cmd ftk imager --verify C:\Daubert Standard Evidence\Image1\Evidence Drive1.001 is not recognized as internal command or external command . need help with that.
Trending now
This is a popular solution!
Step by step
Solved in 3 steps with 1 images
Using the Internet, research the command line version of FTK Imager and identify the command used to generate SHA1 and MD5 hashes for a specific file. Next, launch a Command Prompt window and navigate to the FTK Imager CMD tool (C:\Program Files\AccessData\FTK Imager\cmd\). Use the command you identified in your research to verify the SHA1 and MD5 hashes of the Evidence_drive1.001 file used in this lab."
try both these command
- The full path to the FTK Imager command-line executable is "C:\Program Files\AccessData\FTK Imager\cmd\ftkimager.exe."
- The option --verify is utilized to confirm the hash of the specified file.
- The full path to the file intended for hash verification is "C:\Daubert Standard Evidence\Image1\Evidence_drive1.001."
- no hash show here is picture showing need help with that pleasee