Imaging WD MyCloud ...
 
Notifications
Clear all

Imaging WD MyCloud in Windows?

7 Posts
4 Users
0 Reactions
1,518 Views
(@ercompfor)
Active Member
Joined: 14 years ago
Posts: 5
Topic starter  

I'm attempting to image and process a 4TB WD MyCloud NAS device.

The device contains 1 4TB HDD with multiple EXT4 partitions and when I try to view the contents of the drive in Windows (drive removed, attached to a write block), mounting with ext2fsd, I can see root level directory names, but no contents.

If I view the drive in Linux I can see all of the data.

I can image the drive, but the data is still inaccessible in Windows.

Has anyone had any luck accessing and processing data from a MyCloud device in Windows?


   
Quote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 9 years ago
Posts: 792
 

We imaged one a while ago and analyzed it successfully with Belkasoft Evidence Center. I presume that any other similar software would do it as well.


   
ReplyQuote
(@bntrotter)
Trusted Member
Joined: 12 years ago
Posts: 63
 

What is your imaging platform?


   
ReplyQuote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 9 years ago
Posts: 792
 

Tableau TD2 hardware was used for imaging the NAS HDD, but I presume that Sumuri's Paladin Edge - or other similar programs - would have the same results regarding the binary image.


   
ReplyQuote
(@ercompfor)
Active Member
Joined: 14 years ago
Posts: 5
Topic starter  

The drive was imaged with FTK Imager and processed with ADLab. ADLab lists the various partitions and some system files contained on the drive, but doesn't list the numerous music, image, and video files on the drive.


   
ReplyQuote
JaredDM
(@jareddm)
Estimable Member
Joined: 9 years ago
Posts: 118
 

Windows doesn't natively support Ext4 file systems. You can use third party software such as Paragon's one here http//www.paragon-drivers.com/extfs-windows/

But, to be honest, it's reliability of working is spotty.

You can always use data recovery software such as R-Studio or R-Explorer to browse the file system though, and that's much more reliable.


   
ReplyQuote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 9 years ago
Posts: 792
 

…or examine the image directly with an appropriate software, as we did )


   
ReplyQuote
Share: