Partitions with unrecognized file system

Last Post

RSS

ili43

(@ili43)

New Member

Hello!

I received an image file in E01 and when I try to analyze it with FTK imager and X-Ways, they can't read the partitions. The file system is either "unknown" or "unsupported". It seems to be a Linux OS.

Any ideas how to fix it?

Quote

Topic starter Posted : 24/04/2022 5:08 pm

minime2k9

(@minime2k9)

Active Member

Does it have a "LUKS" header in the first sector of the partition?

If so it will be a Linux Encrypted partition.

Failing that it could be another type of encryption, where has the drive come from?

ReplyQuote

Posted : 25/04/2022 11:14 am