Having serious problem with APFS file system after creating Image file E01
I'm doing a Create Disk image of an IMAC device with 120GB hard drive space with an APFS file system. I have tried getting a hard drive image using the FTK Image and x-wayforensics. The E01 image has a capacity of 60GB. I then proceeded to Mount using FTK and OSforensics. I can see all the data in the "User" partition on the APFS file system. But when I proceed to extract those data, they are unreadable, and have no capacity.
In my experience, the APFS partition on the IMAC is completely none encrypted.
Guys give me some advice, thanks.