Re: [sleuthkit-users] iMAC file extraction

[Ketil F. <ke...@fr...>]

I've reported the same issue on the Autopsy issue tracker:

https://github.com/sleuthkit/autopsy/issues/903

and I have reported and linked an isssue on the sleuthkit issue
tracker that I believe is related:

https://github.com/sleuthkit/sleuthkit/issues/376

I'm not aware of any workaround in Autopsy, so as far as I know it's
not really usable for working with Mac images.

Regards, Ketil

On 9 December 2014 at 09:44, jack tiger <jac...@ne...> wrote:
> Hi all, I am Jack and I am new in the list.
> I have got a little trouble. This happenes when I work on Macintosh computers.
> I have got a E01 files that are the image of the drive. I used FTK imager. Using Autopsy I see folders and files. I can see correctly the preview of Jpg images, for example, But when I extract them the file is empty. This troble happens with every kind of file: doc, docx, xls, xlsx etc
> How I can fix it?
> thanks in advance
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
> _______________________________________________
> sleuthkit-users mailing list
> https://lists.sourceforge.net/lists/listinfo/sleuthkit-users
> http://www.sleuthkit.org



-- 
-Ketil