Adam,
I'm following up to say thanks for this. It's been working well in my archiving and periodic verification processes from my Windows examination machines.
Out of curiosity, what would it take to make this python script work on Linux? Maybe even just the verify portion of the script. My NAS runs a Linux variant and has processor cores to spare. In the past I've used a simple batch script to verify using ftkimager, but your solution is so much more elegant than mine. If it's not too hard, I may finally decide to learn enough python to convert it to run on Linux as well.
Thanks for the script. Just saw it this morning, and it will be incredibly useful for our team as we often do consolidation from multiple drives, and re-acquire with best compression.
Hi, i had this error with the exe file
Total images 1
Total sources 1
Total size 6GB
2016-02-18 130724 ftkimager.exe –verify "G\_\11192_14_21_SMCV\Acquisizioni\CTU01\WD-WMAMAA815069\ctu01_dell_11192_14
.E01"
Traceback (most recent call last)
File "C\Python27\lib\site-packages\cx_Freeze\initscripts\Console.py", line 27, in <module>
File "C\Users\Adam\Documents\GitHub\e-zero\e-zero python\e-zero.py", line 443, in <module>
# ch.setFormatter(ch_formatter)
File "C\Users\Adam\Documents\GitHub\e-zero\e-zero python\e-zero.py", line 372, in verify
logger = logging.getLogger('e-zero.verify')
File "C\Users\Adam\Documents\GitHub\e-zero\e-zero python\e-zero.py", line 350, in dispatcher
sha1_match = sha1_regex.search(result[3])
AttributeError 'NoneType' object has no attribute 'group'
So i read your post and tried the python script that gives me this other error
C\Users\Administrator>python c\cl\e-zero\e-zero.py verify G\_\11192_14_21_SMCV\Acquisizioni\CTU01\WD-WMAMAA815069
Traceback (most recent call last)
File "c\cl\e-zero\e-zero.py", line 34, in <module>
from multiprocessing import Process, Lock, active_children, Queue
File "C\Python27\lib\multiprocessing\__init__.py", line 84, in <module>
import _multiprocessing
ImportError DLL load failed %1 is not a valid Win32 application.
The environment is Windows 7 x64 and pythin 2.7.10
Any idea?
Thanks in advance
Hello guys,
Missed the replies so catching up now.
doppiamunnezza - what version exactly are you running? (e-zero –version) Out of interest what happens when you run ftkimager cli by yourself on the command line. The none type error means that the script isn't getting the correct information back from FTKi and I've not programmed it to deal with that bug - I'll add it to the list.
ftkimager.exe --verify "G\_\11192_14_21_SMCV\Acquisizioni\CTU01\WDWMAMAA815069\ctu01_dell_11192_14.E01"
ccalderwood - let me know if you have any issues.
Bulldawg - To work on Linux I'd need a tool similar to ftkimager that I can use to verify e01s. The obvious answer is ewftools and it just needs me to stop being lazy and add it in.
I'm not checking here often enough (hence the 4 month delay) so email me if you need quicker answers. adam at nucode co uk
Adam