I took an image of an OS Partition using FTK Imager as an EO1 file. Never really took a logical image before because I always take full physical images (best practice) but I wasn't calling the shots this time. So now I can only see the volume stacks, txf, etc. and not the drive structure. I know I should have taken an ad1 image but I only have EnCase and not a full FTK. So, is there any way to load this or do I need to go back and take another image? Mahalo!
↧