Since OSFMount can't mount HFS image files, I mounted the image with FTK Imager, both as a logical and physical drive. I can use OSForensics to access the logical drive (mapped to a drive letter) but when I try to do a Deleted Files Search, I can't see the physical drive (i.e. \\.\PhysicalDrive3)...
Any ideas?
Thanks
Any ideas?
Thanks
Comment