I created an image file of a full external drive using autopsy which seems to be in an RAR format.
I can mount the image and read it in autopsy, but I want to restore the image to the original disk, but cannot seem to find instructions to do so…
I'd created this image before testing some file recovery programs on the Mac and despite the drive saying it hasn't been modified, the programs no longer locate the same deleted files (or disk structure.) (Tools iSkysoft Data Recovery, drivetest. iSkysoft DR was interrupted while restoring files, and no longer can find the directories nor files in any scanning mode.)
Autopsy freezes when working with even a single file (well, they are 640MB .E01 files…) which is making restoring them individually excruciating, and there seems to be no way in autopsy to restore the entire folder {no, right-click on folder doesn't work, this is autopsy 2 on SIFT workstation under vmware Fusion on a mac.)
Since iSkysoft DR was working [restoring the folder] I'd like to restore the image and use that tool, or somehow mount the image to iSkysoft DR…
Any help would be appreciated. It's most frustrating to be able to see the data I want to recover, but to be unable to recover it. Autopsy seems to want to read the entire deleted file before I can tell it where to copy it….