I hope I post in the right place for my first question.
I’m a forensic IT and I’m currently working on a car multimedia embedded system. Unfortunatly for me, the QNX file systems aren’t recognized by my usual forensic software. So, here is the method I use for extract the data :
- First, I recovered a QNX Neutrino virtual machine from QNX’s web site;
- I extract every partition in raw foramt and convert us in vmdk;
- In my QNX VM, I mount individually in read-only all the vmdk;
- After mounting the local network, I copying the datas of all partition.
It seemed that all data are extracted, but after some deep research, I understood that some datas are missing in my extracted partitions.
I found, particularly for two partitions, that there is three sub partitions in one, and two in the other.
My problem is that fdisk refused to mount all this sub partitions. I tried to separate the sub partitions in new files but something is missing.
So, I’m turning to the community for help.
If someone can indicate me where I can find the method to understand how I can interpret the QNX file system or mount the sub partitions, i will be very glad and thankful.
Thanks by advance