any alternative to liveview which is actually maintained?

Hi,

I use Live View on forensics for several years. Since your case is about Win2003 Server, I have to say that Live View could boot Win2003 Server evidence files successfully I think. This is my suggestion
1. Live View requires Administrator privileges to run!!!
2. Make sure you mount evidence files, run Live View , launch VMWare, do excute those tools with Administrator privileges.
3. Take a look at where it failed. If you could generate snapshot and boot, Congratulations~ Is there any blue screen and die..
4. Use Xmount on Linux Platform. Take a chance and it may satisfy you.
5. MD5 VFC - still there is no 100% guarantee!!!

Hi, we had the same issues so we developed our own free method using readily available free software.
We posted the method on my website here..

http//www.nvdigitalforensics.com/2015/02/convert-forensic-image-to-virtual-machine/

Larry

Hi Larry, I've just been trying to use the method you describe in the link but the process seems to be falling down somewhere.

I would also point out there is a typo in the instructions the first word says "vboximanage" when it should just be "vboxmanage" )

But beside that the process all goes smoothly, however the vmdk file that is created is only 1kb in size and on launching the VM nothing really happens, the window just sits on the UEFI shell.

Any thoughts?

Edit further on this I took a step back and converted an E01 to DD, then used VDHtool to convert the dd to vhd, so far so good. Added the VHD with Virtual Box and when attempting to start up it never progresses beyond the UEFI shell command type interface. No errors or anything to indicate a problem.

Edit again disregard I had a tick in the 'EFI' box and this was causing the issue.

Old topic, but since LiveView 0.8… the version that "works" with Win7/8 but has never been actually released to the public Link I have been successfully using OpenLV (Open LiveView) in combination with ARSENALIMAGE MOUNTER. It really works well with Windows 7 and Windows Server 2008 OS'es, but not Windows 10 unfortunately.