autopsy cannot read partial ntfs partitions

Bug #600513 reported by ski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
autopsy (Ubuntu)
New
Wishlist
Unassigned

Bug Description

Binary package hint: autopsy

Autopsy cannot read partial NTFS disk images. To reproduce, simply truncate an image of a ntfs file system and try to load it in autopsy. Autopsy says "cannot determine file system type" and that's all. On my toshiba system partition, which is 1.5GB, the problem starts happening somewhere between 256 and 512 MB. On a larger partition (335GB), even 1GB of data is not enough to avoid the error.

It sure would be nice if autopsy could deal better with these sorts of images.

Daniel T Chen (crimsun)
summary: - autopsy cannot read partial ntfs parttions
+ autopsy cannot read partial ntfs partitions
Changed in autopsy (Ubuntu):
importance: Undecided → Wishlist
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.