![SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute](https://images.contentstack.io/v3/assets/blt36c2e63521272fdc/bltbbdacce05784d8e3/5dc8636cd917b602d491193c/sift-shares.jpg)
SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute
![SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute](https://images.contentstack.io/v3/assets/blt36c2e63521272fdc/blt7be89b259019a69d/5dc86365cd64b00253a36779/start-run.jpg)
SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute
![SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute SANS Digital Forensics and Incident Response Blog | Digital Forensic SIFTing: How to perform a read-only mount of filesystem evidence | SANS Institute](https://images.contentstack.io/v3/assets/blt36c2e63521272fdc/bltd6355fad4be54e9f/5dc8631c174f6e021220de54/ifconfig1.jpg)