I made an external HDD data image by FTK. The imaging process completed successfully and the imaged file has been verified. However, I got a problem when I tried to open the E01 file in EnCase 6.13. The EnCase said there was an error in one of the evidence file. I tried to open the imaged file in FTK, but still failed. FTK said that the filename .e01 does not contain valid evidence.
Is there anyone has solution to this problem? Thanks in advance D
I had problems with older (1.7) versions of FTK producing E01 files that could be opened in version 6 of EnCase, but I haven't seen the problem to which you are referring. Perhaps the E01 file has been corrupted.
Have you tried converting it to a raw image using FTK imager?
I used FTK version 2.5.3, so I don't think the FTK version is the problem.
I didn't try to convert it to a raw image now. ..