[sleuthkit-users] tsk_recover with L01 and Lx01

[Bala <bal...@cs...>]

Hi 

 

I'm trying to use recover *.L01 files using the tsk_recover (from version
4.2.1). 

 

However to my disappointment I get the following error.

Cannot determine file system type (Sector offset: 0)Files Recovered: 0

 

I used the following command to recover the files

tsk_recover -o 32 -e "C:\Files\part-of-usb-disk-logical-file.Lx01" "Extract"

 

I presume the error is due to the wrong offset. Let me know if its
otherwise. 

Could I use any other offset?  If YES how do I determine the offset suitable
for *.L01

 

I'm on a Windows 2012 server 

 

 

Regards

Bala