X-Ways and GHOST spanned files. Log Out | Topics | Search
Moderators | Edit Profile

X-Ways Support Forum » Disk Tools » X-Ways and GHOST spanned files. « Previous Next »

Author Message
Top of pagePrevious messageNext messageBottom of page Link to this message

George E Shrout
Username: shroutosaur

Registered: N/A
Posted on Monday, Sep 25, 2006 - 16:09:   
Does X-Ways Forensics read spanned GHOST files? I tried with a test image which had a file.GHO and file.GHS and I received an error. My goal is to use Xways to perform an analysis on previously ghosted images.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Monday, Sep 25, 2006 - 16:23:   
X-Ways Forensics can interpret raw images and .e01 evidence files, i.e. common forensically sound disk image types.
Top of pagePrevious messageNext messageBottom of page Link to this message

George E Shrout
Username: shroutosaur

Registered: N/A
Posted on Monday, Sep 25, 2006 - 18:05:   
If the technicians who created the GHOST image did not use the forensic switch for Ghost, then it would not be a raw image and X-Ways would not be able to open it? I believe , the techs used the /FRO switch, not the IR switch.
Top of pagePrevious messageNext messageBottom of page Link to this message

Stefan Fleischmann
Username: admin

Registered: 1-2001
Posted on Monday, Sep 25, 2006 - 18:28:   
Yes.

Add Your Message Here
Post:
Username: Posting Information:
Only registered users may post messages here, i.e. you need to have an account.
Password:
Options: Enable HTML code in message
Automatically activate URLs in message
Action:
Forum operated by X-Ways Software Technology AG.