All

I'm trying to convert my image to run on VMware, but don't appear to be having much luck, or there is an easier way. I am following these instructions:

www.computerforensicsw...pic&t=3049  

Which method did you use? Several were discussed in the thread...  

I've mounted with mount image pro, and then trying to use liveview to process  

it really depends on which version of vmarwe workstation are you using and forensic Sw or image mountig software...

more or less it works well on windows XP, with encase and latest workstation

but can be tricky on win 7

There are some info on that on guidance support forum  

- redusadaz

I've mounted with mount image pro, and then trying to use liveview to process

And what was the result? Did you get an error message from LiveView? If so, what was it, exactly?  

I normally use FTK Imager to mount the .e01 and then LiveView to create the Virtual Machine (both of which are FREE!). My understanding is that LiveView is no longer supported and does not properly create VM's of Windows 7 boxes (I have not confirmed this yet for myself, however, so take it for what it is worth).

One of my co-workers used VFC (http://www.virtualforensiccomputing.com/) at his last place of employment and said it does work well with Windows 7 images. We have submitted a purchase request for it but not yet received the software so I cannot confirm its funcitonality (although I explicitly trust the co-worker's judgement).  

I would much more plainly use:
www.osforensics.com/to...mages.html
convert the thingy to RAW and then make either a .pln or a .vmdk descriptor file for it.

Then I would see if a Windows repair would make it boot under VMware.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -