sn0wstorm wrote:
Jaclaz,
This is why I'm just as confused as you. In all my experience I have never encountered something like this. There is no prompt to 'initialize' the disk, the disk shows up in Disk Manager with a blue box but no stripes (like the system reserved partition does in your screenshot) but it's size is the entire disk. Hence the no addressable drive letter. Right clicking on the disk in the manager, every option is greyed out. I cannot initialize, set a new volume, assign a drive letter, nothing. EnCase detects hundreds of thousands of files but fails to display anything except lost files or lost folders (like you mentioned could be due to the partition table corrupt/missing) I'll have another look at it today in the office using X-ways or something, this has genuinely got me stumped! 8O
I would be curious to have a look a the MBR contents of that disk.
@Evamendis
There is no Law requiring the image to be E01, as a matter of fact on a doubtful issue like this I would use a RAW image instead, nothing "obviously E01".
jaclaz
↧