Re: [sleuthkit-users] Autopsy and MAC
Brought to you by:
carrier
Menu
▾
▴
Re: [sleuthkit-users] Autopsy and MAC
|
From: Judson P. <jp...@at...> - 2015-01-14 02:03:39
|
Can you explain your situation further? Certainly it is possible to extract the data for files on an HFS+ image using SleuthKit: we've used it frequently. -- Judson Powers Software Engineer ATC-NY 607-257-1975 x7130 jp...@at... ----- Original Message ----- From: "jack tiger" <jac...@ne...> To: "sleuthkit-users" <sle...@li...> Sent: Monday, January 12, 2015 3:42:53 AM Subject: [sleuthkit-users] Autopsy and MAC I saw it's impossibile to extract directly data of a MAC using Autopsy. I tried mounting the E01 file in windows then using an HFS reader i copied the file. But the photo and the PDF are damaged. Which is a possibile solution? thanks ------------------------------------------------------------------------------ New Year. New Location. New Benefits. New Data Center in Ashburn, VA. GigeNET is offering a free month of service with a new server in Ashburn. Choose from 2 high performing configs, both with 100TB of bandwidth. Higher redundancy.Lower latency.Increased capacity.Completely compliant. vanity: www.gigenet.com _______________________________________________ sleuthkit-users mailing list https://lists.sourceforge.net/lists/listinfo/sleuthkit-users http://www.sleuthkit.org |
