Imm2Virtual: A Windows GUI To Virtualize Directly From Disk Image File
Monday, October 09, 2017 (12:39:23)

Posted by scar

by Nanni Bassetti

Sometimes during a computer forensic investigation, we need to virtualize our image disk, because it could be useful for checking or finding something of interest.

If we need to virtualize a disk image file, we can:

1. Convert the image file in VDI/VMDK
2. Use GNU/Linux and XMount

The first point is very space and time consuming, indeed if we have a disk image of 1Tb in size, we need another 1Tb to store the VDI/VMDK virtual disk for feeding our Virtual Machine and the conversion process is time wasting.

In GNU/Linux we can use XMount which is very comfortable because we don’t need to convert the image file in Virtual Disk file format, it “allows you to convert on-the-fly between multiple input and output harddisk image types. Xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image.“

Read More

Content received from: Forensic Focus, http://www.forensicfocus.com