FTK Imager to Autopsy

Autopsy Help
1

Hi All,

Recently getting more involvement with Autopsiy. I am currently using 4.19.3 version,

I am trying to get memory dump from my laptop, which i tried to get using FTK Imager. The 2 formats that i can get are in .mem or .ad1, ad2 and so forth.

However, I can’t seem to load them in Autopsy as it will detect nothing. Anyone has similar experiences with FTK Imager and perhaps can enlighten me with some tips or assistance? :smile: Will appreciate it a lot thanks!

2

Autopsy don’t really support memory images. You should use a tool like Volatility for memory analysis.