jdbonfils / QNX6FS-Parser-Ingest-Module

Autopsy ingest module in Jpython for recovering data from a QNX6 file system
1 stars 1 forks source link

QNX autopsy #2

Open Ricardo2192643 opened 3 years ago

Ricardo2192643 commented 3 years ago

Good morning, how does this qnx module without autopsy work?

I am not getting it to read qnx operating system images.

jdbonfils commented 3 years ago

Hi,

This module is an Autopsy ingest module so it requires Autopsy to work. However, as Gerd said in issue#1 a whole image can not be passed directly as a data source. It is necessary at first to extract the partitions and load them in.

Here is an extractor for the QNX6 filesystem that does not require Autopsy: https://github.com/ReFirmLabs/qnx6-extractor

Have a nice day.

Jean