Hi, I imported an .ab file an android logical image file extracted with adb, I imported it in autopsy using “unallocated space image file” as using “disk image” gives me a “critical error” image not added, the file is about 4 Gb but inside autopsy nothing is displayed, not even a file can be seen, can you help me?
Thanks
An ab file is a compressed tar file. I suggest that you decompress the file and add the resulting folder to autopsy as a logical file.
https://github.com/nelenkov/android-backup-extractor can be used to decompress the file
Hi and thanks for the help, I am currently on windows, is it possible to extract it on windows too? I tried with 7-zip but the extracted folder is 14k, the .ab file is 4 Gb.