...
| File Format | File Extensions | ||||||
|---|---|---|---|---|---|---|---|
| EnCase® v1 - 8 Image File (EVF / Expert Witness Format) | *.e01 | ||||||
| EnCase® v7 - 8 Evidence File Format v2 | *.ex01 | ||||||
| EnCase® v5 - 8 Logical Evidence File Format v1 | *.L01 | ||||||
| EnCase® v7 - 8 Logical Evidence File Format v2 | *.Lx01 | ||||||
| SMART/Expert Witness Image File | *.s01 | ||||||
| X-Ways Forensics Image File | *.e01 | ||||||
| VMWare Virtual Disk File | *.vmdk | ||||||
Multi-Volume ZIP Archive
| *.zip | ||||||
| Virtual Hard Disk | *.vhd | ||||||
| Segmented Image Unix / Linux DD / Raw Image Files | *.000, *.0000, *.00000, *.001, *.0001, *.00001 | ||||||
| Single Image Unix / Linux DD / Raw / Monolithic Image Files | *.dd; *.img; *.ima; *.raw | ||||||
| Memory Dumps | *.dmp; *.dump; *.crash; *.mem; *.vmem; *.mdmp | ||||||
| Binary Dumps | *.bin; *.dat; *.unallocated; *.rec; *.data; *.binary | ||||||
| Mobile Phone Raw Binary Memory Dumps | *.bin |
| Note | ||
|---|---|---|
| ||
We have removed dropped support for the Advanced Forensics Format (AFF) in HstEx® v4. |
...