Virtual Machine Ima...
 
Notifications
Clear all

Virtual Machine Imaging

6 Posts
5 Users
0 Likes
4,353 Views
Djzngo
(@djzngo)
Posts: 5
Active Member
Topic starter
 

Hello,

I am currently just testing some things with Windows registry, I wanted to look at the registry of a VM I have made. I have no idea how I go about imaging the hard drive of the VM and was wondering if anyone could guide me. (I am using VMWare Workstation 15.0).

If this is any useless information

- Windows 10 machine.
- Virtual machine files are separated.

Thank you

lol

 
Posted : 22/01/2019 3:34 pm
mjpetersen
(@mjpetersen)
Posts: 12
Active Member
 

Regarding Imaging, if you have FTK Imager, you can load the VM by selecting the first segment of the vmdk file. If you are just looking at pulling the registry files, you can select the first vmdk file and use the explorer function to look at the drive and find the registry files, and pull them out.

 
Posted : 22/01/2019 4:03 pm
Djzngo
(@djzngo)
Posts: 5
Active Member
Topic starter
 

Thank you! This worked perfect, I didn't even think to try this I thought there was a process before you could read the data.

 
Posted : 22/01/2019 7:34 pm
(@Anonymous)
Posts: 0
Guest
 

A virtual machine is a software computer that, as a physical computer, runs on an operating system and computer. A virtual machine comprises of various configuration files and is backed up by the physical resource of a host. every virtual machine has a virtual device that provides the same functionality as physical hardware and has the additional benefit in terms of portability and security.

It consists of several files that you store on supported storage devices. A virtual file can have more files if one or more snapshot exist or if you add Raw Device Mappings.

 
Posted : 04/03/2019 12:26 pm
watcher
(@watcher)
Posts: 125
Estimable Member
 

Unlike a physical machine, you can simply "copy" the virtual drive (.vmdk), no imaging necessary.

 
Posted : 05/03/2019 1:20 am
(@msbettyhunt)
Posts: 9
Active Member
 

Thanks Watcher

 
Posted : 15/11/2019 10:27 am
Share: