Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
9
Posts
6
Users
0
Reactions
7,706
Views
Topic starter
18/02/2006 12:58 am
Is it possible to convert a DD to an encase image file? I think it can be done with FTK but I'm not 100%
18/02/2006 2:42 am
I just tried it using FTK Imager v. 2.2 and was able to export test.E01 to test.001 dd format. It worked fine and MD5 hases matched.
Topic starter
18/02/2006 9:31 am
I want the opposite DD to E01
18/02/2006 12:45 pm
It does dd to E01 format. No problems at all.
18/02/2006 5:24 pm
Sorry, sometimes I type faster than I think. That's what I did dd to E01. I also tried E01 to dd and it worked fine.
18/02/2006 6:38 pm
Encase will do dd to .e01 but not the reverse.
Topic starter
19/02/2006 12:53 am
cool thanks. A DD get's slack space right?
19/02/2006 2:42 am
You can use EnCase to convert E01 to raw format. Check out the post on the Digital Detective board for the HOWTO.
regards,
farmerdude
23/02/2006 1:44 pm
DD is the original bit copier from Unix so it will get slack space.