FTK Imager provides support for VXFS, exFAT, and Ext4 file systems. Safely mount a forensic Image (AFF/DD/RAW/001/E01/S01) as a physical device or logically as a drive letter. Once mounted, the read-only media is available to any 3rd party Windows application and exposes the same file system artifacts as FTK Imager.
For example you can mount an HFS+ image, and it will show up as a volume on the examiner's machine in the explorer view.
Virtual mounting options include the ability to:
• Mount physical images (AFF/DD/RAW/001/E01/S01) as only a physical block
device.
• Mount physical images (AFF/DD/RAW/001/E01/S01) images both at the
physical level and logical level.
• Mount physical images (AFF/DD/RAW/001/E01/S01), and logical image (AD1/
L01) custom content images virtually.
It is a free tool that can recover and restore lost or damaged partitions.
Comments (1)