...
File Format | File Extensions | ||||||
---|---|---|---|---|---|---|---|
EnCase® v1 - 8 Image File (EVF / Expert Witness Format) | *.e01 | ||||||
EnCase® v7 - 8 Evidence File Format v2 | *.ex01 | ||||||
EnCase® v5 - 8 Logical Evidence File Format v1 | *.L01 | ||||||
EnCase® v7 - 8 Logical Evidence File Format v2 | *.Lx01 | ||||||
SMART/Expert Witness Image File | *.s01 | ||||||
X-Ways Forensics Image File | *.e01 | ||||||
VMWare Virtual Disk File | *.vmdk | ||||||
Multi-Volume ZIP Archive
| *.zip | ||||||
Virtual Hard Disk | *.vhd | ||||||
Segmented Image Unix / Linux DD / Raw Image Files | *.000, *.0000, *.00000, *.001, *.0001, *.00001 | ||||||
Single Image Unix / Linux DD / Raw / Monolithic Image Files | *.dd; *.img; *.ima; *.raw | ||||||
Memory Dumps | *.dmp; *.dump; *.crash; *.mem; *.vmem; *.mdmp | ||||||
Binary Dumps | *.bin; *.dat; *.unallocated; *.rec; *.data; *.binary | ||||||
Mobile Phone Raw Binary Memory Dumps | *.bin |
Note | ||
---|---|---|
| ||
We have removed dropped support for the Advanced Forensics Format (AFF) in HstEx® v4. |
...