Mount vmdk mac1/30/2023 * New -offset and -sizelimit command line parameters. Refer to my HOWTO on booting an acquired hard disk image containing a Windows installation below.īig thanks fly out to Guy Voncken who gave me the idea of coding this tool and helped me fixing / avoiding some serious bugs :) Please check out his excellent forensic harddisk image acquisition tool named Guymager ( ) Using xmount to boot acquired harddisk images in a virtual machine If you want / need to build the source, get it below and follow the instructions contained in xmount's README file. The easiest way is to follow the instructions under 'Community -> DEBIAN PKG SERVER' and then execute 'sudo apt-get install xmount'. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. Input images can be raw DD, EWF (Expert Witness Compression Format) or AFF (Advanced Forensic Format) files. The virtual representation can be in raw DD, DMG, VHD, VirtualBox's virtual disk file format or in VmWare's VMDK file format. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. Xmount allows you to convert on-the-fly between multiple input and output harddisk image types.
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |