±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 36489
New Yesterday: 5 Visitors: 201

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

FTK Imager - Why do I have a dozen of file type "002", "003"

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Gwekkeo
Newbie
 

FTK Imager - Why do I have a dozen of file type "002", "003"

Post Posted: Jan 14, 20 18:48

Good morning all !

I'm new in the numeric forensic science and I would like to know if someone also had my problem or know how to resolve it.

When I use the "Access Data FTK Imager" software to make an image of my Sandisk USB key of less than 20MB, I get an archive file (shouldn't it be of another extension?), As well as a dozen files such as "file 002", "file 003", "file 004", etc. And I have the text file.
I've that with the FTK Imager - Version 4.2.1 and I've also try with the version Lite 3.1.1

Do you know why I don't have only one file of type "file 001" like in the explanatory videos?

Thank you for reading and have a nice day!  
 
  

jaclaz
Senior Member
 

Re: FTK Imager - Why do I have a dozen of file type "002", "003"

Post Posted: Jan 14, 20 19:04

- Gwekkeo
Good morning all !

I'm new in the numeric forensic science and I would like to know if someone also had my problem or know how to resolve it.

When I use the "Access Data FTK Imager" software to make an image of my Sandisk USB key of less than 20MB, I get an archive file (shouldn't it be of another extension?), As well as a dozen files such as "file 002", "file 003", "file 004", etc. And I have the text file.
I've that with the FTK Imager - Version 4.2.1 and I've also try with the version Lite 3.1.1

Do you know why I don't have only one file of type "file 001" like in the explanatory videos?

Thank you for reading and have a nice day!


Check this:

In the Image Fragment Size field, specify the maximum
size in MB for each fragment of the image file.


On page 13 here:

ad-pdf.s3.amazonaws.co...sGuide.pdf

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

CC4n6
Newbie
 

Re: FTK Imager - Why do I have a dozen of file type "002", "

Post Posted: Jan 14, 20 19:08

You have a USB storage device that is less than 20 MB? Interesting.

What size are you setting the segment size? The default is 1500 MB with a compression of 6 I believe.
What type of out put are you setting the evidence file to be? E01, AD1 etc?  
 
  

jaclaz
Senior Member
 

Re: FTK Imager - Why do I have a dozen of file type "002", "

Post Posted: Jan 14, 20 19:21

- CC4n6
You have a USB storage device that is less than 20 MB? Interesting.


Ahhh the good ol' days, when a byte was a byte, made out of really round 0's and not too skinny 1's Wink :

www.techjunkie.com/ret...sb-drives/

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 

Page 1 of 1