I'm trying a level about forensics on a forum. I have a .img file which I've been trying to recover. In windows i tried 4 tools,but only one sort of worked and I can t open any of the files. I analysed the file with trid and I got back that is:
40.2% .ATN, 16,1%.WK etc(I don't know if it helps).I also installed linux and ran
fdisk -l forensics1.img and I get
fdisk -l forensics1.img Disk forensics1.img: 25 MiB, 26214400 bytes, 51200 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes
Could someone give me any ideas about how to open the file ?
Edit: When I run
dd if=forensics1.img | file - I get
/dev/stdin: Linux rev 1.0 ext4 filesystem data, UUID=3252234c-f5e0-4ed4-a809-beb029819989, volume name "Forensics" (extents) (huge files)