Opening DD file in autopsy

[DKV]

Hi!

When we try to import a DD file into autopsy, we get the warning message: "The file system type of the volume image file could not be determined. If this is a disk image file, return to the previous page and change the type." Upon proceeding (by setting file type to "raw") and clicking analyze, we find that the "file analysis" tab is greyed out. How can we go about fixing this?

 

More info:

   Our type=Partition
   Import Method=Symlink

Thanks

[Joel Fernandez]

When I get stumped on an investigation, I make a note of what i've tried and found and set it aside. You never know if you find something out later that helps. 

--
You received this message because you are subscribed to the Google Groups "CyForHSF" group.
To post to this group, send email to cyfo...@googlegroups.com.
To unsubscribe from this group, send email to cyforhsf+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msg/cyforhsf/-/F-4k3HqHiNQJ.
For more options, visit https://groups.google.com/groups/opt_out.