Thanks for the replies and suggestions. I was able to forensically image the thumb drive using a Tableau write block and FTK Imager to create a dd image. I moved the dd image into Encase 7 and then re-acquired it into the Encase format without issue.
I believe that there are some issues with Encase 7 and imaging of hardware that may have issues. I had this issue on three different thumb drives trying to image with Encase 7. It doesn't appear that the error checking process for Encase 7's imager works well (or at all) if presented with hardware that has any kind of "issues."
Mark
↧