search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.41k stars 597 forks source link

Feature request: Ingest AD1 files #1402

Open kefir- opened 9 years ago

kefir- commented 9 years ago

Having the ability to ingest images in FTK's AD1 file format would be useful. I believe AD1 supports both full images and logical images.

I realize this may be outside of the scope of Autopsy itself, because I haven't come across any open source tools that read AD1 images. Perhaps a discussion here would spawn an effort to add support.

bcarrier commented 9 years ago

I've never looked at it before. Has the format been published?

kefir- commented 9 years ago

No, I don't think it has.

kefir- commented 9 years ago

Based on this discussion, it doesn't look like it has.

https://support.accessdata.com/hc/communities/public/questions/202149539-Support-creation-of-L01-containers-and-or-publish-AD1-format-for-better-interaction-with-other-tools

lyellread commented 4 years ago

+1. This would be a useful feature.