Notifications
Clear all
22/11/2009 11:05 pm
Good thing with FTK is you can convert to another format if you have to hand it off to someone else for analysis. Sometimes I just have to do the collection for preservation or someone else is doing the analysis and it's nice from a customer service perspective to be able to provide a single RAID image in whatever format someone would want.
22/11/2009 11:23 pm
I personally physically create separate images and use either
Raid reconstructor will determine the stripe size, entropy and order of the images automatically and will then give you the option to mount the drive or create a complete single image file.
Page 2 / 2
Prev