FTK and dd


Prickaerts

Administrator
Jan 2, 2006
765
0
#2
Hi Aymannnada,

When you have loaded the Encase file with encase imager select the disk (not the partition) and right click.

Select "Export Disk Image" (this can also be done from the menu).

Then click "Add" and select "Raw(dd)" (I know, I know, adding sounds counter intuitive...)

Select destination folder, image filename and image size. If you delete the default 650 and leave that blank it will create one large DD file, sometimes handy when you use scalpel for example.

Cheers,

Chris
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu