Re: [sleuthkit-users] tsk_recover whole dd image

[<sle...@fa...>]

This command runs fine. Good so far, but I want to automate the whole process, so just giving the image as argument should be enough so that all partitions are processed.

-----Original message-----
Sent: Tuesday, 24 November 2015 at 14:34:04
From: "Derrick Karpo" <dk...@gm...>
To: sle...@fa...
Subject: Re: [sleuthkit-users] tsk_recover whole dd image
Hello.

What happens if you run it against a single partition with an offset,
and force the sector size like this?

  `tsk_recover -v -e -i raw -o 206848 -b 512 wip/image.dd recovered'

Derrick