Forensic analysis of SGI IRIX disk volume [PDF] July 2016

IRIX and IRIX software discussion including open source and commerical offerings.
Forum rules
Any posts concerning pirated software or offering to buy/sell/trade commercial software are subject to removal.
tyfighter
Posts: 14
Joined: Thu Aug 27, 2015 7:15 am

Forensic analysis of SGI IRIX disk volume [PDF] July 2016

Unread postby tyfighter » Fri Jun 30, 2017 5:48 pm

A random google search found this very odd paper http://cradpdf.drdc-rddc.gc.ca/PDFS/unc ... 37_A1b.pdf.
What stood out to me the most is that it's dated July 2016.

Quoting the abstract:
Abstract
This report examines the partition structures of SGI IRIX disk and optical media, from the
perspective of digital forensics. To date, these structures are poorly documented. Should
investigators encounter such systems and media, they may have difficulty obtaining meaningful
information and evidence from such devices. This report hopes to provide sufficient information
to aid investigators with respect to SGI’s proprietary UNIX environment.

Significance to defence and security
Any computer forensic investigator or analyst charged with acquiring or examining evidence
from SGI computer media will find this report helpful. In the civilian sector, numerous SGI
supercomputers and NUMA systems were sold to academia, R&D agencies, facilities and
institutions, and to businesses alike. For government and military, these systems were acquired
primarily by organizations and agencies conducting R&D, simulations and numerical
calculations, some of which are affiliated to DND and DOD. Law enforcement, whether civilian
or military, may be called upon to investigate or acquire evidence from such systems, as many
remain in service today. The information in this report will be of use to those acquiring evidence
from such systems.


Further into the paper they've reverse engineered most of the struct/byte offset data layout of the VTOC to find partitions on disks/images.
:Crimson: :Octane2: :Tezro:

User avatar
Dodoid
Posts: 643
Joined: Mon Jul 04, 2016 1:36 pm
Location: Ottawa, Canada
Contact:

Re: Forensic analysis of SGI IRIX disk volume [PDF] July 2016

Unread postby Dodoid » Fri Jun 30, 2017 6:48 pm

By Defence Research and Development Canada as well. Why is this something they have only recently decided to research? :shock:
:Onyx: :O2000: :Fuel: :Octane: :Octane: :Octane: :O2: :O2: :Indigo2: :Indigo2: :Indy: :Indy:
and a small army of Image

robespierre
Posts: 1577
Joined: Mon Sep 12, 2011 2:28 pm
Location: Boston

Re: Forensic analysis of SGI IRIX disk volume [PDF] July 2016

Unread postby robespierre » Fri Jun 30, 2017 10:30 pm

Major facepalm... do they know how to type "jot /usr/include/sys/dvh.h"?
Reverse engineering indeed.
:PI: :O2: :Indigo2IMP: :Indigo2IMP:

User avatar
Geoman
Donor
Donor
Posts: 825
Joined: Thu May 26, 2005 3:37 am
Location: Munich, Germany
Contact:

Re: Forensic analysis of SGI IRIX disk volume [PDF] July 2016

Unread postby Geoman » Tue Jul 04, 2017 1:54 pm

From IRIX sprang many technologies that are now taken for granted; these include OpenGL,
visual supercomputing, VR applications and APIs, and the XFS file system. OpenGL Multipipe
[10, 57], OpenGL Performer [56] and VizServer [8, 9, 33, 58] also have had an impact on the
industry [55].


By today’s standard, IRIX is old and obsolete, but it was the pinnacle of technology in the UNIX
world at the time. Its disk-partitioning scheme is also a reflection of its advanced system
engineering.


8-)
:Indy: :O2: :O2: :Indigo: :Indigo2IMP: :Octane: :Octane2: :Octane2:
SGI - the legend will never die!!

robespierre
Posts: 1577
Joined: Mon Sep 12, 2011 2:28 pm
Location: Boston

Re: Forensic analysis of SGI IRIX disk volume [PDF] July 2016

Unread postby robespierre » Tue Jul 04, 2017 2:49 pm

The disk partitioning scheme (and the volume header) was developed by MIPS Computer Inc for RISC/os. You can see this in the header file comments.
:PI: :O2: :Indigo2IMP: :Indigo2IMP:


Return to “IRIX and Software”

Who is online

Users browsing this forum: No registered users and 1 guest