Hello guys,
I'm new of this forum. I apologize in advance with you for my basic questions.
I have 42 EWF image files (.E01, ...,.E42).
I only need to extract user data (at this moment I've no need to carving deleted/corrupted files).
Please, can you tell me if the command: testdisk 'imagefile.???' allows me to visualize the directories Documents, Picture, Music, ... and download the files that are there ?
Thanks a lot.
recover user data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
cgrenier
- Site Admin
- Posts: 5432
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: recover user data
Yes, you can use testdisk to list the content of the ewf files: advanced, select the partition, List...
Under Linux, you can also use ewfmount (package ewftools)
Under Linux, you can also use ewfmount (package ewftools)