Convert E01s to DMG...
 
Notifications
Clear all

Convert E01s to DMG. Scan for Virus

NeriMatrixx
(@nerimatrixx)
Junior Member
Hi All,
 
Can anyone suggest a way to convert E01s to DMG? I want to scan for virus. Thz.
 
My forensics Macbook is running Catalina v10.15.7. and I can't get macfuse or osxfuse installed, hence no xmount either. I tried homebrew and homebrew-fuse, still nothing. I think I have read just about every article out there.
Quote
Topic starter Posted : 21/09/2021 7:48 am
hommy0
(@hommy0)
Member

Hi,

Do you access to EnCase?

 

Regards

ReplyQuote
Posted : 21/09/2021 8:35 am
NeriMatrixx
(@nerimatrixx)
Junior Member
Posted by: @hommy0

Hi,

Do you access to EnCase?

 

Regards

Yes, I have access to EnCase.

I don't know how EnCase would facilitate. I have'nt been able to mount Mac in a Windows environment.

ReplyQuote
Topic starter Posted : 22/09/2021 3:43 am
hommy0
(@hommy0)
Member

Hi,

The following enscript might assist.

https://security.opentext.com/appDetails/Evidence-File-Converter

it converts an E01 to DMG.

when using set the split size to zero to get a single DMG, and not a muti part conversion.

 

In terms of Windows, EnCase should be able to mount using the option to Mount as Emulated Disk.  The downside will be Windows does not read HFS+ nor APFS by default.

Paragon Software has a utility that should allow those file systems to be read on Windows.

https://www.paragon-software.com

hope that helps

 

Regards

This post was modified 4 weeks ago by hommy0
ReplyQuote
Posted : 22/09/2021 6:47 am
NeriMatrixx
(@nerimatrixx)
Junior Member
Posted by: @hommy0

Hi,

The following enscript might assist.

https://security.opentext.com/appDetails/Evidence-File-Converter

it converts an E01 to DMG.

when using set the split size to zero to get a single DMG, and not a muti part conversion.

 

In terms of Windows, EnCase should be able to mount using the option to Mount as Emulated Disk.  The downside will be Windows does not read HFS+ nor APFS by default.

Paragon Software has a utility that should allow those file systems to be read on Windows.

https://www.paragon-software.com

hope that helps

 

Regards

I will try those options. Thanks much.

ReplyQuote
Topic starter Posted : 23/09/2021 10:06 pm
Share: