Encase Evidence Fil...
 
Notifications
Clear all

Encase Evidence File with Virtual Machine (Without PDE Mode)

12 Posts
10 Users
0 Reactions
2,360 Views
(@nicci)
Active Member
Joined: 16 years ago
Posts: 15
 

Right now I’m making a VM that I will present to court with mounted EnCase image using
Mount Image Pro – to mount the evidence files as a drive
VFC – to make the VM settings for VMware;
VMware Disk Mount utility – to mount the mounted image as drive as a drive in VM;
VMware Player – to start the Virtual machine;
This will allow you to boot the image and vie it live

If you are only interested in mounting the evidence files – you can use only Mount Image Pro

Cheers

Nicci

P.S.
All that is if you are going to view the machine in Windows environment.


   
ReplyQuote
(@timgruber)
New Member
Joined: 17 years ago
Posts: 3
 

I recommend Paraben Forensics' P2 eXplorer.


   
ReplyQuote
Page 2 / 2
Share: