Does f-secure scan Expert Witness files?

CyberIsKek

Hi,

There is a file container format called Expert Witness files, e01 extension.

A forensic image refers to a copy of unmodified electronic data

The image file can be a copy of a single file or an entire hard drive.

I wanted to know if f-secure av can read the content of this format, like zip or its unsupported?

Firmy

Hello @CyberIsKek

Welcome to the F-Secure Community. Thank you for your post.

At F-Secure, we use advanced scanning technology to detect various types of malware, including those that may be hiding in expert witness files https://www.f-secure.com/v-descs/index.shtml

Regarding e01 files, this file format is an image file, and our product is capable of scanning image files. However, the ability of our product to scan files inside an e01 image file depends on whether the file is encrypted and its size. The encryption status of the e01 image file is determined by the software that generated it.

If the e01 file is not encrypted, our product can easily scan it for any malware.

Please find the links below which provide information on how to run a manual scan, change scanning settings, and scan specific files/folders using F-Secure products:

• Running a virus scan manually: Running a virus scan manually | Total | Latest | F-Secure User Guides
• Changing scanning settings: Running a virus scan manually | Total | Latest | F-Secure User Guides
• Scanning a specific file/folder: Scanning in Windows Explorer | Total | Latest | F-Secure User Guides

If you have any further concerns or questions, please don't hesitate to let us know. We're always happy to help and provide further assistance.

Thank you for your interest in F-Secure products and services!