Notifications
Clear all
Topic starter
11/10/2013 3:47 am
I have got a forensic copy e01 format.
I want to use it to make a bootable drive.
I tried to prepare the two partitions one is hjp recovery
the others is the whole system. I copied all the files, but the disk doesn't boot.
which is the correct way? thanks
11/10/2013 11:53 am
Hi,
You want to make a bootable drive you could se the restore feature in EnCase to reverse your E01 image, or if you still have the suspect drive why do not make a clone with a forensic duplicators?
Topic starter
11/10/2013 1:31 pm
I Used ftk imager.
Thanks
11/10/2013 1:49 pm
Please see this thread about the same topic it can help you.
http//www.forensicfocus.com/Forums/viewtopic/t=9481/
11/10/2013 4:18 pm
The best method is using VFC from MD5
works everytime for me
