Posted: Sat Mar 29, 2014 4:46 am Post subject: Question about a .001 raw format file
I'm a newbie and just wanting to see if I have the aptitude for computer forensics. I went to this site: https: // www . isfce . com/sample-pe.htm to see if I can solve the problem.
It gives a RAW format (.001) version of the evidence media but I can't open it. I used 7-zip and the file is empty. All I can see is the file name.
It also gives an option to download a floppy diskette self-extracting executable which I got an error when I attempted to extract it to a floppy.
Can anyone point me in the right direction on how to get at this data?
Moderator Note: Direct links are not allowed.
Joined: Nov 01, 2005 Posts: 551 Location: Marion, Indiana, USA
Posted: Sat Mar 29, 2014 5:06 am Post subject:
It sounds like it is an image file of a floppy disk. Using Linux you should probably be able to use dd to write the image to a floppy disk. You could also probably mount the file as a loopback device and be able to see its contents.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum