12. Disk Image Formats

• Supported Formats:

  • Raw (dd) single and split

  • E01

  • Raw disk images of phones (Android)

  • Virtual machine formats

• Process:

  • You point Autopsy at the first image file, it does the rest.

  • All it needs is the first image file, such as E01 -> E02, E03, etc.

  • Likewise, 001 -> 002, 003, 004, etc

  • Likewise, Image.bin -> Image(2).bin, Image(3).bin and so on.

  • NOTE: Autopsy does not validate E01 files integrity directly on import. The image has to be verified as a separate examination step.