Notifications
Clear all
Topic starter
29/11/2016 2:36 am
dear all,
I have a virtual server, It is in VHDx format. Which is the best way to analyze it?.
Does ftk imager support it?
Thanks
29/11/2016 2:43 am
You can enable the Hyper-V service on a supported OS (recently did it with Server 2012 R2 Standard) and use the command line to convert the .vhdx file to .vhd. Most forensic tools supports .vhd.
https://
Topic starter
01/12/2016 10:38 pm
Dear all I solved the situation. Using windows 10 I mounted the vhdx file. And then with ftk imager created the copy of the virtual drive.
thanks