Skip to content
Disk Image Parser

Posts tagged: #e01

← Back to all posts
FTK Imager alternatives that run in your browser
What actually replaces FTK Imager for browsing and exporting from a disk image, where the browser wins, and where you still need the real thing.
ftk-imagerdfirforensicse01
Open a disk image online without uploading it
Most online disk image viewers upload your evidence to a server. Here is how to read one in the browser with nothing leaving the machine, and how to prove it.
dfirforensicsprivacye01
Why your disk image won't open
A practitioner's checklist for disk images that refuse to mount: format mismatches, split sets, truncated acquisitions, wrong sector size and corruption.
dfirforensicstroubleshootingdisk-imaging
Open an E01 disk image in your browser
Browse an Expert Witness Format (E01) image without FTK Imager or a local install. How EWF segments, compression and hashing actually work.
e01ewfdisk-imagingdfir