Convert physical image to logical

Hello,

Is there a software or a way to convert physical image (dd) to logical image?

FTK Imager should be able to do that.
regards, Robin

Mount eo1 in ftk imager, right click on the mounted image and option to create logical

Thank You for reply's.

And is there something similar for linux/debian, that could be executed as command line?

What is a logical image? I don't understand this question.

I also don't understand the question.

A logical image is normally not actually a disk 'image' at all. It is a misnomer to some degree.

In all the cases I have seen it discussed & used a logical image is just a container for a bunch of files. The 'image' is created from the File system files and not the physical sectors on the disk.

In our software we use the Virtual Hard Disk (VHD) format for logical images, as they are easy to mount later on. But at a stretch you could even call a Zip or Tar file a logical image.

Logical images make sense if you only need to acquire a small number of files (e.g. a single folder). Or if you are dealing with a mass storage device where physical imaging doesn't isn't possible (e.g. cloud based storage). But if you already have a complete dd physical image, what's to gain from converting the whole thing to a logical image? You would just be loosing data, like the unpartitioned space on the drive, file slack space and records of deleted files.

Is there a software or a way to convert physical image (dd) to logical image?

Yes. Or No.

It depends on the file system contained in that physical image, and the available of tools that can interpret it.

So Yes. Or No.

Please the guidelines to posting are there for a reason "1. Provide as much information as possible. Explain why you're asking the question, …".

Also a (dd) does not really mean "physical".

A dd image is an exact, byte by byte, copy of a source, so it depends on the source.

The terminology is often confusing, in Windows a disk (the whole thing, from the very first sector to the last one) is called PhysicalDrive, whilst a volume (what usually gets a drive letter in Windows) is also often called Logicaldrive.

So, you can make a dd image of a logicaldrive just fine and possibly you can call it a logical image.

On the other hand with phones it is often used "physical extraction" vs. "logical extraction".

Logical image means loosely "(some) contents only" whilst physical image means "contents AND container", as Passmark correctly explained if you have a physical image (of a disk) you have a superset of all the possible logical image(s) that the disk contains, so it makes little sense to discard some information.

If the question is instead how can you access a logical image (logicaldrive/volume) residing inside a physical image, you use (on windows) a mounting tool/driver, such as IMDISK
http//www.ltr-data.se/opencode.html/
or Passmark's OSFMount
https://www.osforensics.com/tools/mount-disk-images.html

jaclaz