[sleuthkit-users] Disk image in TSK
Brought to you by:
carrier
From: Edward D. <eld...@tr...> - 2016-06-25 12:42:53
|
What are the disk image formats in TSK ? I see mention of single and split raw images. To what do these refer ? Are these files created by the Linux 'dd' command ? What about on other operating systems such as Windows ? I also see mention of EWF and AFF. I assume that EWF are images created by the libewf project and I can see that TSK 4.2.0 supports libewf. What is needed to support AFF and where would I find more information about it ? Eddie Diener |