Notifications
Clear all

vhdx: solved

3 Posts
2 Users
0 Likes
4,297 Views
 dega
(@dega)
Posts: 261
Reputable Member
Topic starter
 

dear all,
I have a virtual server, It is in VHDx format. Which is the best way to analyze it?.
Does ftk imager support it?
Thanks

 
Posted : 29/11/2016 1:36 am
(@jacodutoit007)
Posts: 1
New Member
 

You can enable the Hyper-V service on a supported OS (recently did it with Server 2012 R2 Standard) and use the command line to convert the .vhdx file to .vhd. Most forensic tools supports .vhd.

https://blogs.technet.microsoft.com/cbernier/2013/08/29/converting-hyper-v-vhdx-to-vhd-file-formats-for-use-in-windows-azure/

 
Posted : 29/11/2016 1:43 am
 dega
(@dega)
Posts: 261
Reputable Member
Topic starter
 

Dear all I solved the situation. Using windows 10 I mounted the vhdx file. And then with ftk imager created the copy of the virtual drive.
thanks

 
Posted : 01/12/2016 9:38 pm
Share: