David Cowen

It's saying the database is locked, the database is just a sqlite data file its trying to write out. Can you confirm the user you are running eventmonkey as has...

Or what matt mentioned, try adding in --threads 1 to see if its a thread locking issue.

thanks, just checking as the error is a sqlite3 exception being raised when trying to just write data to the sqlite database

i think this is a symptom of python finding locks in linux but not windows so it happily breaks rules that don't exist on our test platform. I'm sure Matt...

Looks like you have a typo, it's ewf handle not ef Get Outlook for Androidhttps://aka.ms/ghei36 From: Delvain Sent: Friday, November 18, 9:33 AM Subject: [dlcowen/dfirwizard] TypeError: argument 1 must be...

Is it a full disk image or just a partition Get Outlook for Androidhttps://aka.ms/ghei36 --- From: Delvain [email protected] Sent: Sunday, November 20, 2016 4:40:01 PM To: dlcowen/dfirwizard Cc: David Cowen;...

No, can you tell me what the partition table shows through the OS? Get Outlook for Androidhttps://aka.ms/ghei36 --- From: Delvain [email protected] Sent: Sunday, November 20, 2016 9:31:46 PM To: dlcowen/dfirwizard...

Can you download and run mmls? It could be the whole disk was formatted and there is no partition table Get Outlook for Androidhttps://aka.ms/ghei36 --- From: Delvain [email protected] Sent: Sunday,...