The video below shows how to open an EnCase (E01) image file, with EnCase. Other methods of accessing data from E01 Files are available here
What’s the problem with the Second Image in the last session of the video ?
No files are there, only “UnUsed Disk file” is found.
How to solve it?
There is no problem, the image mounted only has unused space.
You will notice each of the images opened has different names, the last one opened was called “wiped drive” – because it was an image of a wiped drive – hence there is only unused space.
Fill in your details below or click an icon to log in:
You are commenting using your WordPress.com account. ( Log Out / Change )
You are commenting using your Twitter account. ( Log Out / Change )
You are commenting using your Facebook account. ( Log Out / Change )
You are commenting using your Google+ account. ( Log Out / Change )
Connecting to %s
Notify me of new comments via email.