Hi Vicky583,
try the xmount command:
xmount --in ewf DellLatitudeCPi.E?? --out raw --cache cachefile.bin mntdir
# --in ewf DellLatitudeCPi.E?? --> input format: EWF followed by *all* image files (E01, E02, ...), ence the ".E??"
# --out raw --> output format
# --cache cachefile.bin --> cache file ...
Search found 4 matches
- 17 Oct 2018, 11:05
- Forum: Partition Recovery
- Topic: How to write a new partition table over EWF files
- Replies: 6
- Views: 14873
- 21 Jul 2015, 23:56
- Forum: Partition Recovery
- Topic: How to write a new partition table over EWF files
- Replies: 6
- Views: 14873
Re: How to write a new partition table over EWF files
Hi again,
I found a solution to my problem. The ewfmount command doesn't support write over EWF files, but the xmount command has an option to provide virtual write through a cache file. I leave here the list of commands I used for future reference:
1)
xmount --in ewf --rw diskB.cache diskB.E ...
I found a solution to my problem. The ewfmount command doesn't support write over EWF files, but the xmount command has an option to provide virtual write through a cache file. I leave here the list of commands I used for future reference:
1)
xmount --in ewf --rw diskB.cache diskB.E ...
- 21 Jul 2015, 11:58
- Forum: Partition Recovery
- Topic: How to write a new partition table over EWF files
- Replies: 6
- Views: 14873
Re: How to write a new partition table over EWF files
Hi Fiona,
thank you for your reply. Let me explain better what I've done and what I want to do:
1st - I connected the hard disk "B" to a write bloker and then to my working computer. With this setup I can read disk B, but I cannot write to it (disk B is digital evidence, therefore I don't want to ...
thank you for your reply. Let me explain better what I've done and what I want to do:
1st - I connected the hard disk "B" to a write bloker and then to my working computer. With this setup I can read disk B, but I cannot write to it (disk B is digital evidence, therefore I don't want to ...
- 20 Jul 2015, 12:27
- Forum: Partition Recovery
- Topic: How to write a new partition table over EWF files
- Replies: 6
- Views: 14873
How to write a new partition table over EWF files
Hi,
I used testdisk 7.0 (on ubuntu 14.04 64 bits) over EWF files (with compression) of a hard disk with a damaged partition table. Testdisk was able to find the correct values of the partition table and I want to write it over my EWF files, so I can use other forensics tools (like autopsy). Is this ...
I used testdisk 7.0 (on ubuntu 14.04 64 bits) over EWF files (with compression) of a hard disk with a damaged partition table. Testdisk was able to find the correct values of the partition table and I want to write it over my EWF files, so I can use other forensics tools (like autopsy). Is this ...