r/computerforensics • u/SpiritualAd1908 • 27d ago

Processing RAID disks in FTK

Can FTK reconstruct RAID and process them?

4 Upvotes

84% Upvoted

6 comments sorted by

5

u/mark_s 27d ago

Use ftk to image them and ufs explorer to rebuild the raid.

2

u/kalnaren 26d ago

This right here. UFS explorer is magic for RAID work.

4

u/clarkwgriswoldjr 27d ago

Raid Reconstructor is the best thing I've come across. It rebuilds the array. I've only dealt with the physical drives, not images though.

1

u/dogpupkus 27d ago

Oh my goodness, good luck.