Support for L01 files?

Tool requests, development, and troubleshooting topics related to TSK.

Moderator: carrier

Support for L01 files?

Postby JDrake » Tue Aug 02, 2016 3:57 pm

Does TSK support L01 files?
I see in the release notes for 4.1.0 that L01 support is added, but it does not seem to work. I have tried with both 4.1 and 4.3.0 and tried using Autopsy as well.

I get the following when trying to open an L01 file:
Errors occured while ingesting image
1. Cannot determine file system type (Sector offset: 0)


I have also tried using the Java API but get the following error when trying to open an L01 file:

Caused by: java.sql.SQLException: NOT NULL constraint failed: blackboard_attribute_types.value_type
at org.sqlite.core.NativeDB.throwex(NativeDB.java:397)
at org.sqlite.core.NativeDB._exec(Native Method)
at org.sqlite.jdbc3.JDBC3Statement.executeUpdate(JDBC3Statement.java:116)
at org.sleuthkit.datamodel.SleuthkitCase.addAttrType(SleuthkitCase.java:1500)
at org.sleuthkit.datamodel.SleuthkitCase.addAttrType(SleuthkitCase.java:1509)
at org.sleuthkit.datamodel.SleuthkitCase.addBuiltInAttrType(SleuthkitCase.java:1964)
at org.sleuthkit.datamodel.SleuthkitCase.initBlackboardTypes(SleuthkitCase.java:527)
at org.sleuthkit.datamodel.SleuthkitCase.<init>(SleuthkitCase.java:175)
at org.sleuthkit.datamodel.SleuthkitCase.newCase(SleuthkitCase.java:502)
....
JDrake
 
Posts: 1
Joined: Tue Aug 02, 2016 3:46 pm

Return to The Sleuth Kit (TSK)

Who is online

Users browsing this forum: Bing [Bot] and 1 guest

cron