JFYI, there is a related thread about a "phantom" version of ExFat/TexFat, here:
http://www.forensicfocus.com/Forums/viewtopic/t=11393
And it seems like X-Ways (WinHex) is the only tool around correctly interpreting it.
Check if in the meantime The Sleuthkit available build has included it:
http://www.forensicfocus.com/Forums/viewtopic/p=6571446/#6571446
If - by any chance - you have the possibility to create (on that device or on another one) a "new" image with that filesystem (without of course customer/case data) and provide it to Cybergonzo, it would be appreciated:
http://www.forensicfocus.com/Forums/viewtopic/p=6572995/#6572995
as well as exact information on the OS version running on that phone:
http://www.forensicfocus.com/Forums/viewtopic/p=6571453/#6571453
jaclaz
↧