All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 2 posts ] 
Author Message
 Post subject: Here be the filesystem
PostPosted: October 16th, 2017, 15:27 
Offline

Joined: October 20th, 2014, 5:25
Posts: 87
Location: Sweden
Finally I managed to pin-point the SA-structure, and now I see the filesystem of this one chip from a pen-drive.

The filesystem-browser lets me extract files, but at this point I want to extract the whole image but I'm unable to see how I can achieve this.

Is this possible from the Log Image-element or do I need to add something else?


Attachments:
log_image.png
log_image.png [ 13.4 KiB | Viewed 1048 times ]
Top
 Profile  
 
 Post subject: Re: Here be the filesystem
PostPosted: October 16th, 2017, 15:47 
Offline

Joined: July 2nd, 2014, 8:05
Posts: 156
Absolutely,
Just go back to workspace and open dumpviewer (top toolbar) on the element you want to save dump from (usually it is Logical image). Then press "Save all" to save whole dump as bin file for further export to Rstudio/FTK/Encase/whatever you use.

_________________
VISUAL NAND RECONSTRUCTOR. A big revolution in chip-off data recovery


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group