Media Image

From CGSecurity

Jump to: navigation, search

en.png english version de.png deutsche Version es.png versión español fr.png version française ru.png Русская версия


Working with Hard Disk Image Files

TestDisk and PhotoRec can also work with hard disk images. The disk image must be available under its image_filename in the working directory, or you can add its Path and filename to a TestDisk command line. For example:

testdisk_win.exe C:\BOCHS\DOS\c.img

will include the Path\image_file, c.img, in the list of drives on TestDisk's initial screen. Then open the image file just like any physical drive.

Image files are limited in size by the OS and filesystem:
2 GiB (FAT16), 4 GiB (FAT32), 16 GiB (ext2/3 with 1 kb block), 256 GiB (ext2/3 with 2 kb block), 2048 GiB (ext2/ext3 with 4 kb block)

Recover data from Encase EWF image

To analyse an image from an Encase E01 file

testdisk image.E01

If the Encase image is splitted in several files

testdisk 'image.E*'

Return to TestDisk

Data Recovery
Security