[sleuthkit-users] extracting .E01 and .Ex01 metadata

[Bala <bal...@cs...>]

Hi Guys

 

I'm a newbie to TSK. Could someone help me figure out which classes and
methods that I need to use to get the following details from .E01 and Ex01
files

 

1.       Extract metadata from the forensic image

2.       Iterate over files in the file structure on .E01 and .Ex01 images
and read/copy the files.

 

Environment 

TSK Version 4.1.0 Core ( not the framework)

OS version window 7/ windows 2008 R2

 

 

 

Regards

Bala