Imm2Virtual: A Windows GUI To Virtualize Directly From Disk Image File

by Nanni Bassetti Sometimes during a computer forensic investigation, we need to virtualize our image disk, because it could be useful for checking or finding something of interest. If we need to virtualize a disk image file, we can: 1. Convert the image file in VDI/VMDK 2. Use GNU/Linux and XMount The first point is very space and time consuming, indeed if we have a disk image of 1Tb in size, we need another 1Tb to store the VDI/VMDK virtual disk for feeding our Virtual Machine and the conversion process is time wasting. In GNU/Linux we can use XMount which is very comfortable because we don’t need to convert the image file in Virtual Disk file format, it “allows you to convert on-the-fly between multiple input and output harddisk image types. Xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image.“ Read More

from Forensic Focus http://ift.tt/2z8Tq14