Extracting files Mac HFS plus image

A place to ask the community for help with using Autopsy.

Moderator: carrier

Extracting files Mac HFS plus image

Postby scottj » Sun Feb 08, 2015 1:21 am

When I run searches against a Mac HFS image, and click on a result, I can see the text view of the file, but if I try to extract any file it extracts a zero byte length file. If I browse the image with a Mac I can pull up the files fine, it's only after I extract them that they come up basically empty. If I do the same with an NT image the files extract fine. It doesn't matter if the files are PDF or DOCX or XLSX they all extract empty files. Is there something special I need to do with Mac images?
scottj
 
Posts: 1
Joined: Sun Feb 08, 2015 1:06 am

Return to Autopsy Troubleshooting

Who is online

Users browsing this forum: No registered users and 1 guest

cron