Forensic Focus - Computer Forensics, Computer Forensic Training, Digital Forensics
LoginRegisterForumsColumnistsPapersEducationGraduatesReviewsInterviewsNewsletterJobsEventsBlogAdvertise
Search Forensic Focus
Custom Search

Find us on Facebook
Follow Forensic Focus on Twitter
Columnists
"I erred." "I was mistaken."
Craig Ball
Single Sign On
Simon Biles
Copyright and games console modification
Dan Gaskell
To GUI or not to GUI?
Chris Hargreaves
'Web 2.0' as evidence
Sean McLinden
Sometimes it’s all about timing
Sam Raincock
Avoiding common job application errors
David Sullivan
Scalability: A Big Headache
Dominik Weber
Graduate Recruitment

computer forensics graduate jobs

Main Menu
MY ACCOUNT
COMMUNITY
EMPLOYMENT
EDUCATION
RESOURCES
MISC
Follow Forensic Focus

Join newsletter

Join LinkedIn group

Follow on Twitter

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Members' blogs

External feeds

Bookmark & share: Bookmark and Share

Computer Forensics Newsletter
Newsletter

You must be a
registered user
to receive our newsletter

Register Now!

Mounting an image
Go to page Previous  1, 2, 3, 4, 5, 6, 7  Next
Post new topic   Reply to topic   Printer Friendly Page     Forum Index -> General Discussion
View previous topic :: View next topic  
Author Message
hogfly
Senior Member


Joined: Oct 06, 2004
Posts: 288
Location: New York

PostPosted: Sun Dec 07, 2008 6:22 pm    Post subject: Re: Mounting an image Reply with quote

A few posts down from that quote it was discussed that cygwin can't mount images. I've since moved on and just simply use a linux virtual machine. SIFT works great and autoexports the samba share RO. For more enterprise level work I have a dedicated linux box that I put images on and remotely mount. I gave up on mount image pro (issues with the cache buffer updating A times during operation), and I am not going to pay for ASR smart mount...sorry but linux mount works just fine for me.
Back to top
View user's profile Visit poster's website
MMachor
Member


Joined: Apr 25, 2008
Posts: 69
Location: Canton, OH

PostPosted: Sun Dec 07, 2008 7:21 pm    Post subject: Re: Mounting an image Reply with quote

ImDisk is now working. Don't know why it went through a spell of not working, but haven't had a problem recently. Funny thing is that I did not change anything either. Not sure what its problem was for a while.
Back to top
View user's profile Visit poster's website
keydet89
Senior Member


Joined: Oct 19, 2004
Posts: 2378
Location: NoVA

PostPosted: Mon Dec 08, 2008 6:34 am    Post subject: Re: Mounting an image Reply with quote

hogfly wrote:
....and I am not going to pay for ASR smart mount...s

Even if the evaluation version is free?
Back to top
View user's profile Visit poster's website AIM Address
jaclaz
Senior Member


Joined: Nov 16, 2007
Posts: 420
Location: Near Florence - Italy

PostPosted: Mon Dec 08, 2008 6:53 am    Post subject: Re: Mounting an image Reply with quote

@MMachor
Everything is well that ends well.... Very Happy

@hogfly
@keydet89

I don't get it Shocked we have at least two working solutions, VDK and IMDISK.

VDK has the advantages:
1) that it connects as \\.\PhysicalDriven
2) that using a .pln file it can mount the drive image with it's correct CHS geometry
3) that it allows access to MBR and hidden sectors

BOTH have command line support and a GUI or pseudo-GUI. Exclamation

Out of curiosity, what would be the reason for a more complex solution "VM running Linux", "evaluation versions" or CYGWIN? Question

@keydet89
Maybe you are interested in this:
www.eterlogic.com/Prod...veSDK.html

jaclaz
Back to top
View user's profile
keydet89
Senior Member


Joined: Oct 19, 2004
Posts: 2378
Location: NoVA

PostPosted: Mon Dec 08, 2008 3:18 pm    Post subject: Re: Mounting an image Reply with quote

jaclaz,

I'm still trying to come up with an end-to-end solution for mounting using ImDisk...
Back to top
View user's profile Visit poster's website AIM Address
hogfly
Senior Member


Joined: Oct 06, 2004
Posts: 288
Location: New York

PostPosted: Mon Dec 08, 2008 3:30 pm    Post subject: Re: Mounting an image Reply with quote

jaclaz,
It apparently doesn't work on 64bit server 2008 without modifying the OS behavior and I'm not about to jeopardize the integrity of my machine to load the driver.
Back to top
View user's profile Visit poster's website
keydet89
Senior Member


Joined: Oct 19, 2004
Posts: 2378
Location: NoVA

PostPosted: Mon Dec 08, 2008 3:51 pm    Post subject: Re: Mounting an image Reply with quote

I got ImDisk working on XP and mounted an XP image just fine (just one partition). I'm including this in WFA 2/e
Back to top
View user's profile Visit poster's website AIM Address
hogfly
Senior Member


Joined: Oct 06, 2004
Posts: 288
Location: New York

PostPosted: Mon Dec 08, 2008 6:28 pm    Post subject: Re: Mounting an image Reply with quote

Yeah me too. It's a good utility, just doesn't meet all of my needs unfortunately.
Back to top
View user's profile Visit poster's website
keydet89
Senior Member


Joined: Oct 19, 2004
Posts: 2378
Location: NoVA

PostPosted: Mon Dec 08, 2008 7:05 pm    Post subject: Re: Mounting an image Reply with quote

such as?
Back to top
View user's profile Visit poster's website AIM Address
hogfly
Senior Member


Joined: Oct 06, 2004
Posts: 288
Location: New York

PostPosted: Mon Dec 08, 2008 8:15 pm    Post subject: Re: Mounting an image Reply with quote

Well as I just pointed out it doesn't work with server 2008 64 bit, whereas a vm or a linux box with a samba share works just fine for analysis.
Back to top
View user's profile Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic   Printer Friendly Page     Forum Index -> General Discussion All times are GMT - 6 Hours
Go to page Previous  1, 2, 3, 4, 5, 6, 7  Next
Page 6 of 7


Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Use of this website signifies your agreement to the Terms of Use/Privacy Policy available here.

All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest © 2010 Forensic Focus


Interactive software released under GNU GPL, Code Credits, Privacy Policy
.: fisubsilver shadow phpbb2 style by Daz :: CPG-Nuke port by norseman :: ported to CPG-Dragonfly by jamin :.