Quoting [EMAIL PROTECTED]:
Help! I've created a .bin file of a Windows XP system using an
X-Late HardCopy device (in image mode). I thought I could simply
mount the image in Linux (I'm using Helix 0307) using:
# mount -o loop -t iso9660 image001.bin /media/test
but that doesn't work (mount: wrong fs type, bad option, bad
superblock on /dev/loop1, missing codepage or other error).
Any ideas how I can mount a .bin image in Helix so I can investigate
it? I can mount it in Autopsy, but I want the OS to see it.
If the image made was from a NTFS filesystem, you need to mount it as
NTFS, not as iso9660. (CD-rom image.)
As this is from a Windows XP, the filesystem is likely NTFS.
Do to forensics, it also might be better to mount it as read-only.
Best regards,
Johan Braeken.
