Re: [sleuthkit-users] Newbie Q - USB file formats

[Brian C. <ca...@sl...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On May 4, 2004, at 10:42 PM, myk wrote:

> I am trying to recover files from a USB key drive (Kingston Technology 
> DataTraveler 2.0) using autopsy 1.7 running in Knoppix STD.  Autopsy 
> tells me it doesn't recognize the file format (none of the FAT's nor 
> NTFS).  The USB drive was "quick" formatted on a Win2K machine.   What 
> am I doing wrong?  TIA.

What device name did you use to specify the USB drive?  Some keys have 
multiple partitions and you will need to specify the device for the 
partition and not the device for the entire key.

I was waiting to add disk support to version 2 of TSK, but I think I 
may add it sooner.

brian


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iD8DBQFAmRbrOK1gLsdFTIsRApgqAJ4zGgdoM1xl8PGuBwv582GYLVYZsgCePExb
frd0xMMv4I15Vr8bFWaLl5c=
=jLB8
-----END PGP SIGNATURE-----