[sleuthkit-users] Warning: Autopsy could not determine the volume system type for the disk image er
Brought to you by:
carrier
From: k m <com...@gm...> - 2011-05-24 01:40:41
|
I am using tsk and autopsy after i get my image into the case via autopsy, i get this warning "Warning: Autopsy could not determine the volume system type for the disk image (i.e. the type of partition table). Please select the type from the list below or reclassify the image as a volume image instead of as a disk image" if i select fat which i believe the image is, it it seems to only allow me to do a keyword search, I have tried to view the image with the ftk demo and it does load into that, the I have tried the image in DD and E01 neither works how can i fix this to examine this image, i am quite new to the forensics field in general so any additional tips would also be appreciated, i am running via cygwin, using tsk 3.2.1 and autopsy 2.24 thanks |