[sleuthkit-users] .L01 files (Logical Evidence File)

[Yke S. <Yke...@Zy...>]

Hi

As stated in the history notes, since version 4.1.1 (Sep 24, 2013), SleuthKit supports .L01 files. But when I try to process one of them with one of the tools, for example ffind or tsk_recover, I get the error message "Cannot determine file system type". TskAuto::openImage works but TskAuto::findFilesInFs fails. Also my own program fails since I call the same functions. Should I use a different function then TskAuto::findFilesInFs or is it just not supported to browse files for L01 files.

Yke

DISCLAIMER: This e-mail and any attachments are intended only for the individual or company to which it is addressed and may contain information which is privileged, confidential and prohibited from disclosure or unauthorized use under applicable law. If you are not the intended recipient of this e-mail, you are hereby notified than any use, dissemination, or copying of this e-mail or the information contained in this e-mail is strictly prohibited by the sender. If you have received this transmission in error, please return the material received to the sender and delete all copies from your system.
______________________________________________________________________
This email has been scanned by the Email Security.cloud service.
______________________________________________________________________