Looking for feedbac...
 
Notifications
Clear all

Looking for feedback on Arsenal Image Mounter

4 Posts
3 Users
0 Reactions
665 Views
ArsenalConsulting
(@arsenalconsulting)
Eminent Member
Joined: 16 years ago
Posts: 49
Topic starter  

Hello All,

We are looking for feedback on Arsenal Image Mounter as we consider new features. While discussing user-configurable diff file locations the concept of "replay" came up… would you be interested in storing diff files somewhere and then using them in the future to replay how your forensic image (still write blocked) looked at various times during your interaction?

Also, is anyone using Hyper-V to boot disk images mounted with Arsenal Image Mounter? We would like to hear about how mounting all previously unknown disks in offline mode (DISKPART> SAN POLICY=OfflineAll) works. Arsenal Image Mounter should ask whether to bring these disks online, so the process should be pretty straightforward.

Finally, are there any other features you would like added?

Mark Spencer, President
Arsenal Consulting, Inc.
ArsenalExperts.com


   
Quote
pcstopper18
(@pcstopper18)
Trusted Member
Joined: 15 years ago
Posts: 60
 

Unfortunately, I cannot say that any of the features mentioned in your post is of use to me currently but I have found AIM to be a great tool and I use it regularly to mount images during my examinations.

Please keep up the good work.

All the best,


   
ReplyQuote
minime2k9
(@minime2k9)
Honorable Member
Joined: 14 years ago
Posts: 481
 

Like the tool, however some times I've noticed mounted drives don't allow me to see Volume Shadow Copies (using vssadmin) when Encase PDE does.
Other than that, its a great tool!


   
ReplyQuote
ArsenalConsulting
(@arsenalconsulting)
Eminent Member
Joined: 16 years ago
Posts: 49
Topic starter  

Like the tool, however some times I've noticed mounted drives don't allow me to see Volume Shadow Copies (using vssadmin) when Encase PDE does.
Other than that, its a great tool!

I'm very interested in any details you can send me about these situations… digging into at least one of them may help us understand where the issue is. Do you know if the drives were definitely in an "online" state in these situations?

Thanks,

Mark


   
ReplyQuote
Share: