ECToo / registrydecoder

Automatically exported from code.google.com/p/registrydecoder
0 stars 0 forks source link

Cannot add E01 file #36

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
I am having trouble adding encase E01 files as evidence to the tool.

I do 'Add evidence' and point to the first E01 file in my evidence directory, 
then i do next and then start processing, i get the following error:

Unable to process the 'file_name'.E01. would you like to skip the file. If I do 
no, again the same message saying Unable to process evidence file. Exiting

Original issue reported on code.google.com by aniket.b...@gmail.com on 6 Aug 2012 at 6:25

GoogleCodeExporter commented 9 years ago
Hello,

Are you able to mount the e01 file using mount_ewf or similar tools? The ewf 
library has issues with some files that are created.

Original comment by atc...@gmail.com on 21 Sep 2012 at 6:21

GoogleCodeExporter commented 9 years ago
Hello,

I am having the same issue.  I can mount the image of the drive with Encase 
"mount as emulated disk" or FTK imager lite.

Registry decoder version  R013

Thank you,

Mark

Original comment by mappleby...@gmail.com on 9 Oct 2012 at 10:44