Recipe Difficulty: Medium
Python Version: 2.7
Operating System: Linux
With pyewf and pytsk3 comes a whole new set of tools and operations we must first learn. In this recipe, we will start with the basics: opening an evidence container. This recipe supports raw and E01 images. Note that unlike our previous scripts, these recipes will use Python 2.X due to some bugs found while working with the Python 3.X version of these libraries. That said, the main logic would not differ between the two versions and could easily be ported. Before we learn to open the container, we need to set up our environment. We will explore this in the next section.
