With OSForensics V7 you can boot an E01 as a VM. It does all the setup for you.
There is a beta release here
https://www.passmark.com/forum/osfor...sics-v7-0-beta
Announcement
Collapse
No announcement yet.
OSFMOUNT: issue when creating a vmdk from a physical drive
Collapse
X
-
OSFMOUNT: issue when creating a vmdk from a physical drive
Hi there,
We're trying to create a virtual machine from an E01 image. So far, we're able to mount it with OSFMount (CLI), in write cache mode.
Then, we create a vmdk from it (virtual box managed tools). After that, we create the virtual machine.
The problem is when we start the VM: it's directly paused (files are in read only).
We've managed to find a workaround: we set the mounted disk to OFFLINE and we force the write mode (using DISKPART).
Using any other GUI tools like FTK imager is directly working. Is there a better way to fix it?
Thanks
Tags: None
Leave a comment: