Notifications
Clear all

FTK Imager

4 Posts
2 Users
0 Reactions
3,747 Views
(@oxfordemma78)
New Member
Joined: 2 years ago
Posts: 2
Topic starter  

Hi I am using this for the first time and I am following the instructions, each time I click on “image Mount” or “add evidence” I get a pop up telling me the image does not exist. I have a usb stick with the evidence files on it. Is there anyway I can view them on anything else or convert them to readable files? I am using accessdata FTK imager 4.7.12. All I can see is the name of the file, it says regular file, and the date modified. If I click on the file I can’t view it. Thank you for any help 


   
Quote
(@jadams951)
Eminent Member
Joined: 7 years ago
Posts: 37
 

What file type is on the USB?  


   
ReplyQuote
(@oxfordemma78)
New Member
Joined: 2 years ago
Posts: 2
Topic starter  

When I look at the files they say the name of the file then they say.EO1 and .E02 and so on up to .E33 I’ve tried to open them on a E01 viewer and Disk Image Viewer. and they both say “image not found” or they can’t read the image. I’ve tried the “image mount” and if I click on the files it says “image not located” and add evidence and all that comes up then is a lot of meta data/ numbers etc. thank you for the reply 


   
ReplyQuote
(@jadams951)
Eminent Member
Joined: 7 years ago
Posts: 37
 

When you go to FTK Imager do you go to File > Add Evidence Item > Image File > then browse and select the E01 and click finish.  That should load up the image file.  Then you can do image mounting.  


   
ReplyQuote
Share: