The other day, talking to one of the analysts in Dallas, a question emerged about analyzing Parallels’ virtual machine hard drives. To my surprise, I did not find many help on this issue on-line and did not find tools that would interpret the file system in Parallels’ hard drive images. The simplest way I wanted to approach this issue is by converting the hard drive image to something simpler like a dd image. I found a very nice article on how to convert to a plain hard drive image using Parallels Image Tool that comes with Parallels Desktop, but I had no access to a Mac and wanted to see if there is a way to do this on Windows…
Cellebrite's Monica Harris on Achieving Balance in Corporate Investigations and E-Discovery
What Can You Tell Us About Your Password? A Contextual Approach
Uncovering Windows Registry Data and the Latest Mac Artifacts
Important: No API Key Entered.
Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.