Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
Having the ability to ingest images in FTK's AD1 file format would be useful. I believe AD1 supports both full images and logical images.
I realize this may be outside of the scope of Autopsy itself, because I haven't come across any open source tools that read AD1 images. Perhaps a discussion here would spawn an effort to add support.
Having the ability to ingest images in FTK's AD1 file format would be useful. I believe AD1 supports both full images and logical images.
I realize this may be outside of the scope of Autopsy itself, because I haven't come across any open source tools that read AD1 images. Perhaps a discussion here would spawn an effort to add support.