Hi there everyone,
OK, I have been trying to determine the offset of the file system on my usb by entering the following commands: fsstat, mmls and fls. I keep getting the following errors:
$ sudo fsstat -o /dev/sdc
Invalid image offset (tsk_parse: invalid image offset: /dev/sdc)
$ sudo mmls -o /dev/sdc
Invalid image offset (tsk_parse: invalid image offset: /dev/sdc)
$ fls -o /dev/sdc
Invalid image offset (tsk_parse: invalid image offset: /dev/sdc)
sansforensics@siftworkstation:~/Desktop/Programs$
Then I have been using these commands on their own and I keep getting "Cannot determine Partition type". Like:
sansforensics@siftworkstation:~/Desktop/Programs$ sudo mmls /dev/sdc
Cannot determine partition type.
So I think I understand the problem. Only certain partition types such as DOS are recognized and I guess my usb stick is not one of them. The only thing I want to know is: How do I fix it so that it DOES recognize it? I have looked around. Somebody mentioned something about carving? What is that supposed to do and how does one do it?
Thanks in advance,
Michael
↧