Notifications
Clear all

FTK Imager "dd" to ProDiscover

4 Posts
2 Users
0 Reactions
957 Views
deckard
(@deckard)
Trusted Member
Joined: 20 years ago
Posts: 77
Topic starter  

I have been given several images to work with that were created with FTK imager in "dd" format. If I add them as evidence in FTK Imager I see waht I should. But I want to analyze them in ProDiscover. How can I either open them in PD or convert them into a form PD can work with?

Help appreciated.

Bill


   
Quote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Bill,

ProDiscover reads dd format. If there are multiple files, you need to create a .pds. Create the file with notepad, call it whatever you want and give it the .pds extension. The first line should read "DD-SplitImage", without the quotes. Each line after that should be the file names of the images, in order, with their extension, on one line each.

ex

DD-SplitImage
image.001
image.002
etc.

HTH,
H


   
ReplyQuote
deckard
(@deckard)
Trusted Member
Joined: 20 years ago
Posts: 77
Topic starter  

Thanks Harlan,

I found sort of this in the help file, but it wasn't quite this lucid and I botched it.

Thanks


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

No problem. Let me know if you need any other help with PD


   
ReplyQuote
Share: