Split Raw Images

A place for general discussion of sleuthkit.org projects or other open source forensics software.

Moderator: carrier

Split Raw Images

Postby mikevrg » Thu Apr 28, 2016 2:40 pm

I am new to Forensics and in need of some advice. The practice file I have is in a RAR format. I have unzipped the file with WinRAR. The files have expanded into multiple files with the names of Practice.001 thru Practice.008. My question is how do I combine these files into one file so I can use Autopsy for examination or should I examine each file individually? Any guidance would helpful.

Posts: 1
Joined: Thu Apr 28, 2016 2:26 pm

Re: Split Raw Images

Postby Hoyt » Thu May 12, 2016 12:42 am

Hello Mike,

You don't have to worry about the fragments/segments following Practice.001. As long as they're all in the same directory, load Practice.001 into Autopsy and it will assemble the remaining parts automagically.

Hoyt Harness, CFCE
Posts: 74
Joined: Thu Dec 11, 2014 4:02 am
Location: Little Rock, AR

Return to General

Who is online

Users browsing this forum: No registered users and 1 guest