I am using the OSForensic 3.0 beta. I have 2 USB external drives connected. One drive has the image on it, created in Encase format, and the the other drive is blank. I want to restore the Encase image to the blank drive. I have done this a few times, but I seem to be doing something wrong.
After the image is restored and verified, Windows keeps telling me that the drive does not have a recognized file system and the drive must be formatted. However, if I look at the drive by adding it to the case in OSForensics, I am able to see the data and the file structure on the drive.
How do I restore the image in such a way as to make it read as the original drive and have the file structure show up in Windows?
I'm using Windows 7. I have tried this on two different computers with the same result.
After the image is restored and verified, Windows keeps telling me that the drive does not have a recognized file system and the drive must be formatted. However, if I look at the drive by adding it to the case in OSForensics, I am able to see the data and the file structure on the drive.
How do I restore the image in such a way as to make it read as the original drive and have the file structure show up in Windows?
I'm using Windows 7. I have tried this on two different computers with the same result.
Comment