Hello,
I am currently just testing some things with Windows registry, I wanted to look at the registry of a VM I have made. I have no idea how I go about imaging the hard drive of the VM and was wondering if anyone could guide me. (I am using VMWare Workstation 15.0).
If this is any useless information
- Windows 10 machine.
- Virtual machine files are separated.
Thank you
lol
Regarding Imaging, if you have FTK Imager, you can load the VM by selecting the first segment of the vmdk file. If you are just looking at pulling the registry files, you can select the first vmdk file and use the explorer function to look at the drive and find the registry files, and pull them out.
Thank you! This worked perfect, I didn't even think to try this I thought there was a process before you could read the data.
A virtual machine is a software computer that, as a physical computer, runs on an operating system and computer. A virtual machine comprises of various configuration files and is backed up by the physical resource of a host. every virtual machine has a virtual device that provides the same functionality as physical hardware and has the additional benefit in terms of portability and security.
It consists of several files that you store on supported storage devices. A virtual file can have more files if one or more snapshot exist or if you add Raw Device Mappings.
Unlike a physical machine, you can simply "copy" the virtual drive (.vmdk), no imaging necessary.
Thanks Watcher