Mounting VHD/VHDX Images in Linux

Описание

In this episode, we’ll take a look at how to mount VHD or VHDX images within the SIFT Workstation or other Linux system. This is particularly useful for data acquisitions performed with KAPE, which can generate these images (if you aren’t familiar with KAPE, please see the “Introduction to KAPE” episode listed below).

*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***

? Commands Used in This Episode

sudo apt install libguestfs-tools
sudo virt-list-filesystems /path/to/vhdx
sudo guestmount -a /path/to/vhdx -m /dev/xxxx -r /path/to/mountpoint -o allow_other

Libguestfs:
http://libguestfs.org/

Introduction to KAPE:
https://www.youtube.com/watch?v=pZRrZAJif8Q

Background Music Courtesy of Anders Enger Jensen:
https://www.youtube.com/user/HariboOSX

#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics #KAPE