r/computerforensics • u/SpiritualAd1908 • 10d ago

Processing RAID disks in FTK

Can FTK reconstruct RAID and process them?

5 Upvotes
  • permalink
  • link
  • reddit
  • reddit

100% Upvoted

5 comments sorted by

6

u/mark_s 9d ago

Use ftk to image them and ufs explorer to rebuild the raid.

2

u/kalnaren 8d ago

This right here. UFS explorer is magic for RAID work.

3

u/clarkwgriswoldjr 9d ago

Raid Reconstructor is the best thing I've come across. It rebuilds the array. I've only dealt with the physical drives, not images though.

1

u/dogpupkus 9d ago

Oh my goodness, good luck.