.L01 File Extension
EnCase Logical Evidence File
| Developer | Guidance Software |
| Popularity |
4.0 | 10 Votes |
What is an L01 file?
An L01 file is a logical evidence file created by OpenText EnCase Forensic. It contains a subset of data (files and filenames) copied from an EnCase evidence (.E01) file. Users often save an E01 file's most noteworthy data as an L01 file, for quicker access and review.
More Information
OpenText Encase Forensic is a digital forensics program used to retrieve and review data from PCs, smartphones, and other electronic devices. Forensic analysts can save the entirety of the data they retrieve from a device as an E01 file, and they can save subsets of that data as L01 files. For example, if only a few retrieved documents are relevant to the analyst's investigation, they can save those documents in an L01 file, so they don't have to continually load and parse through irrelevant information.
Optionally, analysts can choose to include only a file's filename in an L01 file. In that case, the analyst must still open the related E01 file to view the file. Analysts can also hash L01 files, so they and other parties can verify the files' contents are unaltered.
NOTE: The .LX01 format replaced the L01 format. OpenText acquired Guidance Software in 2017.
How to open an L01 file
You can open an L01 file in OpenText EnCase Forensic (Windows). Doing so allows you to view the files and other information the L01 file contains.