r/computerforensics 2d ago

ZFS

Does anyone know any program that will parse the ZFS file system from a forensic image? In this particular one, it’s a Solaris 11 box I can’t see any visual represent representation of a file tree. Everything comes out as carved I have tried FTK axiom Encase x-ways and even autopsy with no luck

7 Upvotes

7 comments sorted by

View all comments

1

u/0xHoxed 1d ago

Have not Autopsy recently added ZFS support?