Using dcfldd, I have imaged one disk of a win10 mirrored volume.
Autopsy does not recognize it as an NTFS file system, but instead shows "SFS" or "secure file system".
The target machine is, indeed, using NTFS. My guess is that because this is a dynamic volume with mirroring enabled, it doesn't recognize it properly.
I still have access to the raw disk, but really need to be able to do file analysis as well.
Autopsy complains with this error:
Invalid magic value (Not a NTFS file system (magic))
How do I fix this so Autopsy can do file analysis?
Here's the output of blkcat -hwv -o 63 sdb.dd 0