# Issues Adding Source Data "failed to add data source" - drive with no FS

**URL:** <https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235>\
**Category:** Autopsy Help\
**Created:** [August 29, 2019, 12:44pm UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235 "2019-08-29T12:44:40Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ScirocoMole](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@ScirocoMole](https://sleuthkit.discourse.group/u/ScirocoMole)\
**Post date:** [August 29, 2019, 12:44pm UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/1 "2019-08-29T12:44:40Z")

</div>

I am having an issue adding a “local drive” as well as a “disk image” of the same drive (e01 - should have tried single file raw DD but I doubt that’s the issue) to an autopsy case. I get the following errors,

“\*Failed to add data source (critical errors encountered). Click below to view the log.”

Log below,

Errors occurred while ingesting image

1. Cannot determine file system type (Sector offset: 0)

I believe this drive to be empty (wiped), however, my compressed e01 of the drive is over 1GB (750gb physical drive) and to me, that seems reasonable to believe there might be something on there. Regardless of data present, how are you supposed to analyze a drive that is _raw_ (not containing a file system)? FTK Imager pulls it up without flaw so i browse in HEX view. Of course, I don’t want to browse in the HEX view to find anything. I’d rather have a tool carve it for me.

Any suggestions? Am I ingesting the image/drive incorrectly?

Any and all help is appreciated.

Thank you!

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [August 29, 2019, 1:02pm UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/2 "2019-08-29T13:02:16Z")

</div>

Try and add the data source as an “Unallocated Space Image File”.

---

<div class="post-metadata">

**Author:** ![ScirocoMole](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@ScirocoMole](https://sleuthkit.discourse.group/u/ScirocoMole)\
**Post date:** [August 31, 2019, 1:31am UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/3 "2019-08-31T01:31:59Z")

</div>

Appears to have added the file. Does this work with all image types (raw, dd, e01, segmentation, etc)? Also is there a way to essentially add an “unallocated” physical drive?

---

<div class="post-metadata">

**Author:** ![Mark\_McKinnon](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/mark_mckinnon/32/42_2.png) [@Mark\_McKinnon](https://sleuthkit.discourse.group/u/Mark_McKinnon)\
**Post date:** [August 31, 2019, 3:45am UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/4 "2019-08-31T03:45:53Z")

</div>

Yes it should work with all image types. Not sure if you can add a “unallocated” physical drive.

---

<div class="post-metadata">

**Author:** ![ScirocoMole](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@ScirocoMole](https://sleuthkit.discourse.group/u/ScirocoMole)\
**Post date:** [September 2, 2019, 11:58pm UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/5 "2019-09-02T23:58:09Z")

</div>

Thank you for your help. Unfortunately it does not appear that you can add an “unallocated” physical drive. Hopefully this can be put in as a feature request!

---

<div class="post-metadata">

**Author:** ![tadekh](https://avatars.discourse-cdn.com/v4/letter/t/e36b37/32.png) [@tadekh](https://sleuthkit.discourse.group/u/tadekh)\
**Post date:** [February 20, 2020, 12:30am UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/6 "2020-02-20T00:30:52Z")

</div>

I experienced the same issue (Autopsy 4.14.0). Trying to add E01 image. Getting error Failed to add data source. Cannot determine file system type (Sector offset: 0). Does anyone know what cause this problem?

---

<div class="post-metadata">

**Author:** ![Hashim](https://avatars.discourse-cdn.com/v4/letter/h/90db22/32.png) [@Hashim](https://sleuthkit.discourse.group/u/Hashim)\
**Post date:** [June 11, 2020, 6:29pm UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/7 "2020-06-11T18:29:54Z")

</div>

I think it’s ridiculous that as fully-featured as Autopsy is, it doesn’t support adding raw disks - both Windows and Linux expose their raw disks so there’s no obstacle there. Most established data recovery programs allow for this because of how easy it is for a disk to have its partition table (always in the first 512 bytes) removed, especially in criminal cases. I was looking forward to using Autopsy but the lack of this feature makes it pointless given how often I work with disks that aren’t and cannot be initialised for forensic reasons.

---

<div class="post-metadata">

**Author:** ![Strike](https://yyz2.discourse-cdn.com/free1/user_avatar/sleuthkit.discourse.group/strike/32/1916_2.png) [@Strike](https://sleuthkit.discourse.group/u/Strike)\
**Post date:** [December 7, 2023, 8:21pm UTC](https://sleuthkit.discourse.group/t/issues-adding-source-data-failed-to-add-data-source-drive-with-no-fs/235/8 "2023-12-07T20:21:09Z")

</div>

Hello mark, i have the same problem and i tried your solution and now it doesnt give me the error but it has no data/files inside the data source even though it should.
