Follow

Support for EX01 files, Unrecognized file system error

Created by: Aaron Stochlia
Created date:
Last Updated date:

Issue: Currently, AccessData products have the ability to read Encase evidence files of the EX01 variant.  You may however run into an error message when ingesting these files simlar to this: "Unrecognized file system"

 

Cause: This is due to the fact that the EX01 file format can be encrypted.  If the file is encrypted, you will not be able to read and process the image as AccessData does not have the ability to decrypt the Encase proprietary encryption.

 

Remedy: use a suitable decryption tool (such as Encase) to remove the encryption protection, and then AccessData products will be able to recognize and read the file.   

Was this article helpful?
1 out of 1 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk