Re: [Vol-users] libewf on Windows (I know, I know!)

Well, we *do* have the address space for it, but it relies on the ewf library. I don't remember off the top of my head all the details of installing it properly on Windows. I remember some sort of pain though. -- Jamie Levy (@gleeda) On Aug 16, 2016, at 11:03 AM, Tom Yarrish <tom(a)yarrish.com> wrote: IIRC volatility should be able to handle an E01 file natively now (unless that's a *nix only thing). But another option would be either 1) Arsenal Image Mounter (which works much better than FTK, EnCase, etc IMO) or 2) Use FTK to covert the E01 image to a RAW image file and then just run that through volatility. Thanks, Tom PGP Key ID - B32585D0 On Tue, Aug 16, 2016 at 2:39 PM, Bridgey theGeek <bridgeythegeek(a)gmail.com _______________________________________________ Vol-users mailing list Vol-users(a)volatilityfoundation.org http://lists.volatilityfoundation.org/mailman/listinfo/vol-users