Notifications
Clear all
26/11/2009 2:32 pm
Right now I’m making a VM that I will present to court with mounted EnCase image using
Mount Image Pro – to mount the evidence files as a drive
VFC – to make the VM settings for VMware;
VMware Disk Mount utility – to mount the mounted image as drive as a drive in VM;
VMware Player – to start the Virtual machine;
This will allow you to boot the image and vie it live
If you are only interested in mounting the evidence files – you can use only Mount Image Pro
Cheers
Nicci
P.S.
All that is if you are going to view the machine in Windows environment.
26/11/2009 11:05 pm
I recommend Paraben Forensics' P2 eXplorer.
Page 2 / 2
Prev