Issue: Currently, AccessData products have the ability to read Encase evidence files of the EX01 variant.  You may however run into an error message when ingesting these files simlar to this: "Unrecognized file system"

 

Cause: This is due to the fact that the EX01 file format can be encrypted.  If the file is encrypted, you will not be able to read and process the image as AccessData does not have the ability to decrypt the Encase proprietary encryption.

 

Remedy: use a suitable decryption tool (such as Encase) to remove the encryption protection, and then AccessData products will be able to recognize and read the file.