.L01 文件扩展名
EnCase Logical Evidence File
| 开发者 | Guidance Software |
| 受欢迎程度 |
3.9 | 11 票 |
什么是 L01 文件？
An L01 file is a logical evidence file created by OpenText EnCase Forensic. It contains a subset of data (files and filenames) copied from an EnCase evidence (.E01) file. Users often save an E01 file's most noteworthy data as an L01 file, for quicker access and review.
更多信息
OpenText Encase Forensic is a digital forensics program used to retrieve and review data from PCs, smartphones, and other electronic devices. Forensic analysts can save the entirety of the data they retrieve from a device as an E01 file, and they can save subsets of that data as L01 files. For example, if only a few retrieved documents are relevant to the analyst's investigation, they can save those documents in an L01 file, so they don't have to continually load and parse through irrelevant information.
Optionally, analysts can choose to include only a file's filename in an L01 file. In that case, the analyst must still open the related E01 file to view the file. Analysts can also hash L01 files, so they and other parties can verify the files' contents are unaltered.
注: The .LX01 format replaced the L01 format. OpenText acquired Guidance Software in 2017.
如何打开 L01 文件
You can open an L01 file in OpenText EnCase Forensic (Windows). Doing so allows you to view the files and other information the L01 file contains.