Error Messages

From SleuthKitWiki

Jump to: navigation, search

This page contains some error messages that could be encountered when running TSK and Autopsy.


Error extracting file from image (ntfs_uncompress_compunit: Phrase token offset is too large:  1 (max: 0))

This message occurs when trying to process a compressed NTFS file that is corrupt. This can occur when a file has been deleted and the clusters have been reallocated to another file.


Personal tools