I have been given an Encase E01 file which has a deleted partition. I am attempting to recover it using testdisk but getting an error. If looked at the man page but can't see what I'm doing wrong. I've double checked the path to the file etc. Output below. Any help would be greatly appreciated.
Thanks
root@kali:~# testdisk /mnt/hgfs/Forensics/CaseOX201804.E01
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Unable to open file or device /mnt/hgfs/Forensics/CaseOX201804.E01: Function not implemented
Function not implemented
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
cgrenier
- Site Admin
- Posts: 5432
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: Function not implemented
Run "testdisk -v". Is ewf lib enabled ?
If it's not the case, download and compile testdisk source code as described in https://www.cgsecurity.org/testdisk.pdf
Good luck
If it's not the case, download and compile testdisk source code as described in https://www.cgsecurity.org/testdisk.pdf
Good luck