MediaImage

Supported MediaImage file formats (IdClassification.MediaImage - Media images to store disk (and partition) images)

All entries in table below are supported for file format identification.
'X' in "Text" column indicates text extraction is supported for the file format.
'X**' in "Text" column indicates text extraction is supported BUT binary-to-text filtering is used on partially parsed document records.
'X' in "Metadata" column indicates metadata extraction is supported for the file format.
'X' in "EmbeddedItem" column indicates embedded item/attachment extraction is supported for the file format.
'X' in "ContentHash" column indicates a content hash is supported for the file format (see MD5ContentHash and SHA1ContentHash)

If a file format does not have a supported content extractor that extracts text then, optionally (default), a binary-to-text content extractor will be used to extract UTF-8, UTF-16, Windows-1252, and ASCII from the binary. In many cases, indexable text can be extract from unknown document formats.

MediaImage Supported File Formats

File Format Id Enum Value	Metadata	EmbeddedItem	Description
MediaImageISO	X	X	ISO disk image format (.iso).
MediaImageWIM	X	X	WIM (Microsoft Windows Imaging) disk image format (.wim;.swm).
MediaImageWIMSplit	X	X	Split WIM (Microsoft Windows Imaging) disk image master segment (this is the split segment which contains the header) (.wim;.swm).
MediaImageWIMSplitSegment			Split WIM (Microsoft Windows Imaging) disk image segment (this is not the master segment which contains the header) (.wim;.swm).
MediaImageUDF	X	X	Universal Disk Format (UDF) disk image format (.udf).
MediaImageDmg	X	X	Apple Mac OS X Disk Copy Disk Image format (.dmg;.smi;.img;.image).
MediaImageVirtualHardDiskVer1	X	X	Microsoft Virtual Hard Disk v1 (VHD) File Format (.vhd).
MediaImageVirtualHardDiskVer2			Microsoft Virtual Hard Disk v2 (VHDX) File Format (.vhdx).
MediaImageVMDiskDescriptor			VMWare VMDK (Virtual Machine Disk) descriptor text file format (not an disk image but describes the layout of the data in the virtual disk) (.vmdk).
MediaImageVMDisk1	X	X	VMWare VMDK (Virtual Machine Disk) format version 1 for storage in virtual machines (.vmdk).
MediaImageVMDisk2	X	X	VMWare VMDK (Virtual Machine Disk) format version 2 for storage in virtual machines (.vmdk).
MediaImageVMDisk3	X	X	VMWare VMDK (Virtual Machine Disk) format version 3 for storage in virtual machines (.vmdk).
MediaImageVMDisk5	X	X	VMWare VMDK (Virtual Machine Disk) format version 5 (version 4 was never released) for storage in virtual machines (.vmdk).
MediaImageHfs	X	X	Apple Hierarchical File System (HFS) Disk Image format (.hfs;.dmg;.dsk).
MediaImageHfsPlus	X	X	Apple Hierarchical File System Plus (HFS+, or extended) Disk Image format (.hfs;.dmg;.dsk).
MediaImageQcow	X	X	QCOW disk image format supported by the QEMU processor emulator (.qcow, .qcow2).
MediaImageMasterBootRecord	X	X	Master boot record (MBR), an MBR is a type of boot sector at the very beginning of partitioned computer mass storage devices.
MediaImageLinuxExtFileSystem	X	X	Linux extended file system for Linux kernel (ext2/ext3/ext4) (.img).
MediaImageEnCaseEvidenceFileVer1			Encase evidence file format version 1 (E01) (.e01-.e99, *.s01-.s99).
MediaImageEnCaseEvidenceFileVer2			Encase evidence file format version 2 (Ex01) (.e01-*.e99).
MediaImageEnCaseLogicalEvidenceFileVer1			EnCase Logical Evidence File version 1. This file type allows users to group smaller collections of digital evidence without having to load the entire E01 evidence file to view them (.L01).
MediaImageEnCaseLogicalEvidenceFileVer2			EnCase Logical Evidence File version 2. This file type allows users to group smaller collections of digital evidence without having to load the entire EX01 evidence file to view them (.L01)
AdvancedForensicFormat			Advanced Forensic Format (.aff).
ApplePartitionMap			Apple Partition Map (.iso).