Anlyzing an image i...
 
Notifications
Clear all

Anlyzing an image in Sleith Kit

2 Posts
2 Users
0 Likes
147 Views
(@mudshark)
Posts: 1
New Member
Topic starter
 

I'm new to Sleuth Kit and Autopsy, and to Linux in general, and I cannot get Autopsy to recognize a dd image created with FTK when I try to create a case. I try to add an image file to the case, but Autopsy tells me "The image format type could not be determined for this image file". I have stored the image (a single 20G image file) in my /usr/local/images folder, and have tried the "copy" as well as "symlink" option when trying to add the image.

Does anyone have any suggestions? Thanks much.

 
Posted : 23/08/2006 12:14 am
(@bgrundy)
Posts: 70
Trusted Member
 

"The image format type could not be determined for this image file".

Version of Autopsy/TSK installed? Did you select type "disk" (version dependant)? Can you provide output of mmls or sfdisk -l -uS for the image?

Barry

 
Posted : 23/08/2006 12:33 am
Share: