Page 1 of 1

Function not implemented

Posted: 19 Apr 2019, 18:00
by westmantooth
I have been given an Encase E01 file which has a deleted partition. I am attempting to recover it using testdisk but getting an error. If looked at the man page but can't see what I'm doing wrong. I've double checked the path to the file etc. Output below. Any help would be greatly appreciated.

Thanks

root@kali:~# testdisk /mnt/hgfs/Forensics/CaseOX201804.E01
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Unable to open file or device /mnt/hgfs/Forensics/CaseOX201804.E01: Function not implemented

Re: Function not implemented

Posted: 22 Apr 2019, 08:56
by cgrenier
Run "testdisk -v". Is ewf lib enabled ?
If it's not the case, download and compile testdisk source code as described in https://www.cgsecurity.org/testdisk.pdf
Good luck