Hello and I apologize if this in the wrong place.Â
I am doing an assignment and we are to take an E01 Image and convert it to dd (raw) format, so we can use it in Oracle's VirtualBox. I am following the exact directions and I can successfully go through the steps in FTK Imager (we have to have Image File as the souce). However, when I look for the conversion, I find the log file with the proper file extension of .001.However, the converted document I need for the raw data extracts as a winRAR file and I tried two different extraction programs to see if I could get the information. With the second one, I can create a folder with the six files that were in the winRAR file, three .fat, two .img and one ntfs. They cannot be compressed.
I have been trying all day to no avail. I am not sure if it is a ridiculous mistake I am making but it feels like I have tried everything. I apologize if I did not do a good job of explaining the issue, but hopefully it is clear enough.Â
Where does WinRAR come into it? You've got a log and the raw file...are you just trying to open the raw image with WinRAR for no reason?
You need to refine your technical communication skills.
Noone can understand what you are doing, basically because you are failing at reporting it completely and in detail.
Namely:
I am doing an assignment and we are to take an E01 Image and convert it to dd (raw) format, so we can use it in Oracle's VirtualBox.
No (meaning that VirtualBox wants not a RAW/dd image but either a VMDK or a VDI or a VHD):
https://docs.oracle.com/en/virtualization/virtualbox/6.1/user/vdidetails.html
so you will need anyway a further conversion.
I am following the exact directions and I can successfully go through the steps in FTK Imager (we have to have Image File as the souce).
Not knowing WHAT exactly these exact directions are, it is difficult to say whether they are correct and if you are following them correctly.
However, when I look for the conversion, I find the log file with the proper file extension of .001.
A conversion implies that you have a source (the image file) and a target (the new dd image) Â + (optionally) a log file.
Understanding which one is the image and which one is the log should be easy to understand looking at just the file size, the lof hould be much smaller.
There is nothing in computing that can say that .001 is "proper" (at the most it can be said that "it is common" or that it is "as used by ...").
You completely fail to specifiy the EXACT names (and extensions) of the files that were generated (a well as that of the source image file).
What is happening is likely to be that your WinRAR believes that the extension of the image file "belongs" to it (i.e. WinRAR program is associated to that file extension), but there is no reason on earth why you would want to open a dd/RAW image with WinRAR.Â
However, the converted document I need for the raw data extracts as a winRAR file and I tried two different extraction programs to see if I could get the information. With the second one, I can create a folder with the six files that were in the winRAR file, three .fat, two .img and one ntfs. They cannot be compressed.
Besides the fact that you do not provide any info about the two different "extraction" programs you used, nor the order in which you used them ("the second one" is a meaningless description) the base point revolves around the "I need for the raw data extracts as a winRAR file" that makes no sense.
You have a disk image in Encase format.
You convert it to RAW/dd with FTK imager.
That's it, you don't have to extract anything nor any reason to use WinRAR.
What you see *somehow* as .fat, .img and ntfs are likely to be the volumes inside the disk image, but why would you want to "extract" them (or compress them) is a mistery to me.
Maybe you can re-describe the procedure (the detailed directions) you are trying to follow and the overall plan, besides providing the missing details.Â
jaclazÂ
