Notifications

Clear all

Convert E01s to DMG. Scan for Virus

General (Technical, Procedural, Software, Hardware etc.)

Last Post by NeriMatrixx 3 years ago

5 Posts

2 Users

0 Reactions

2,227 Views

RSS

NeriMatrixx

(@nerimatrixx)

Eminent Member

Joined: 6 years ago

Posts: 26

Topic starter 21/09/2021 6:48 am

Hi All,

Can anyone suggest a way to convert E01s to DMG? I want to scan for virus. Thz.

My forensics Macbook is running Catalina v10.15.7. and I can't get macfuse or osxfuse installed, hence no xmount either. I tried homebrew and homebrew-fuse, still nothing. I think I have read just about every article out there.

Quote

Topic Tags

hommy0

(@hommy0)

Trusted Member

Joined: 14 years ago

Posts: 98

21/09/2021 7:35 am

Hi,

Do you access to EnCase?

Regards

ReplyQuote

NeriMatrixx

(@nerimatrixx)

Eminent Member

Joined: 6 years ago

Posts: 26

Topic starter 22/09/2021 2:43 am

Posted by: @hommy0

Hi,

Do you access to EnCase?

Regards

Yes, I have access to EnCase.

I don't know how EnCase would facilitate. I have'nt been able to mount Mac in a Windows environment.

ReplyQuote

hommy0

(@hommy0)

Trusted Member

Joined: 14 years ago

Posts: 98

22/09/2021 5:47 am

Hi,

The following enscript might assist.

https://security.opentext.com/appDetails/Evidence-File-Converter

it converts an E01 to DMG.

when using set the split size to zero to get a single DMG, and not a muti part conversion.

In terms of Windows, EnCase should be able to mount using the option to Mount as Emulated Disk. The downside will be Windows does not read HFS+ nor APFS by default.

Paragon Software has a utility that should allow those file systems to be read on Windows.

https://www.paragon-software.com

hope that helps

Regards

This post was modified 3 years ago by hommy0

ReplyQuote

NeriMatrixx

(@nerimatrixx)

Eminent Member

Joined: 6 years ago

Posts: 26

Topic starter 23/09/2021 9:06 pm

Posted by: @hommy0

Hi,

The following enscript might assist.

https://security.opentext.com/appDetails/Evidence-File-Converter

it converts an E01 to DMG.

when using set the split size to zero to get a single DMG, and not a muti part conversion.

In terms of Windows, EnCase should be able to mount using the option to Mount as Emulated Disk. The downside will be Windows does not read HFS+ nor APFS by default.

Paragon Software has a utility that should allow those file systems to be read on Windows.

https://www.paragon-software.com

hope that helps

Regards