Statements (30)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
file format
|
| gptkbp:accessibleBy |
gptkb:Autopsy
gptkb:Magnet_AXIOM gptkb:EnCase_Forensic FTK Imager X-Ways Forensics |
| gptkbp:alsoKnownAs |
E01 file
|
| gptkbp:category |
disk image format
|
| gptkbp:developedBy |
gptkb:Guidance_Software
|
| gptkbp:fileExtension |
.e01
|
| gptkbp:firstReleased |
late 1990s
|
| https://www.w3.org/2000/01/rdf-schema#label |
EnCase Evidence File
|
| gptkbp:mayInclude |
deleted files
logical files multiple partitions unallocated space |
| gptkbp:numberOfLocations |
bitstream images
|
| gptkbp:proprietary |
true
|
| gptkbp:supports |
gptkb:MD5_hash
compression checksums metadata storage CRC32 hash splitting into segments |
| gptkbp:usedBy |
gptkb:EnCase
|
| gptkbp:usedFor |
digital forensics
|
| gptkbp:usedIn |
gptkb:law_enforcement
corporate investigations |
| gptkbp:bfsParent |
gptkb:Advanced_Function_Format
|
| gptkbp:bfsLayer |
7
|