Re: [sleuthkit-users] Using splitted images in autopsy
Brought to you by:
carrier
From: Benjamin J. W. <ben...@bi...> - 2004-12-15 15:24:53
|
On Mon, 13 Dec 2004, Brian Carrier wrote: > > On Dec 13, 2004, at 3:46 AM, LERTI - David Billard wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Dear all, > > > > I have some disks (up to 80Go) to acquire. I'm using dd and my images > > are > > splitted into 700MB files. Is there a way to use these splitted images > > in > > Autopsy? > > Autopsy does not yet support split images, although that and disk > images are tops on the list for the next major addition (which will be > soon). I think pyFlag may support them though... > > http://pyflag.sourceforge.net/ > I'm working on a disk image now with damaged partition/file allocation tables. Any idea when the disk-image Autopsy will be ready? :) Ben |