Viewing forensic Images in a VM

are you talking about Live Boot from within Forensic Explorer functionnlity ?

Yes, LiveBoot in FEX works but LiveView is an old stand alone application which seemed to stop working with Vista. Even then it was hit and miss. I used to have VFC as well but this also costs money.

Not that user friendly but it works.

https://www.pinguin.lu/opengates

Thank you very much. I'll give it a go and report back. Appreciated.

Does anyone know of a 'free' tool to view mounted images in a VM? I specifically mean Windows 7, 8 and 10. The only one I've found that seems to work OK is Forensic Explorer by GetData but this costs a pretty penny.

The old standard Live View (doesn't work) for these versions sadly. I've googled and searched this forum but no joy.

Thanks

You are looking for on-the-fly (and write-protected) virtualization of disk images on Windows? We have considered adding this kind of functionality to Arsenal Image Mounter (with replay support and other fun things), but have not received many requests for it.

Have you tried this new project from Nanni Bassetti?

https://articles.forensicfocus.com/2017/10/06/imm2virtual-a-windows-gui-to-virtualize-directly-from-disk-image-file/

Mark Spencer, President
Arsenal Consulting, Inc.
ArsenalExperts.com
@ArsenalArmed