Note: Partition read errors appear in the top blue section. When such errors are
detected, the drive can be physically imaged to allow further analysis in a
higher-level forensic tool such as EnCase Forensic. Even though TX1 could not
parse or detect partitions and filesystems, there is still forensically valuable
info that can be carved or extracted using EnCase.
The Additional Info section displays common information for all drive types,
protocol information for a subset of drive types, and drive utilization information.
In the Drive Utilization area, if the drive has one or more filesystems, tap the Entire
drive menu to display a list of filesystems.
Chapter 4 Using TX1
170
OpenText™ Tableau™ Forensic TX1 Imager
ISTX240300-UGD-EN-1
To Next Page
Loading...
