Difference between revisions of "Xmount"

From ForensicsWiki
Jump to: navigation, search
Line 11: Line 11:
  
 
xmount allows you to convert on-the-fly between multiple input and output harddisk image types. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. The virtual representation can be in [[Raw Image Format|raw DD]], [[Virtual Disk Image (VDI)|VirtualBox's virtual disk file format]] or in [[VMWare Virtual Disk Format (VMDK)|VmWare's VMDK file format]]. Input images can be raw DD, [[Encase image file format|EWF (Expert Witness Compression Format)]] or [[AFF|AFF (Advanced Forensic Format)]] files. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike.
 
xmount allows you to convert on-the-fly between multiple input and output harddisk image types. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. The virtual representation can be in [[Raw Image Format|raw DD]], [[Virtual Disk Image (VDI)|VirtualBox's virtual disk file format]] or in [[VMWare Virtual Disk Format (VMDK)|VmWare's VMDK file format]]. Input images can be raw DD, [[Encase image file format|EWF (Expert Witness Compression Format)]] or [[AFF|AFF (Advanced Forensic Format)]] files. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike.
 
== Examples ==
 
 
See [http://files.pinguin.lu/projects/HOWTO-BootingAcquiredWindows.pdf HOWTO: Booting an acquired hard disk image containing a Windows installation using xmount and OpenGates].
 
  
 
== See Also ==
 
== See Also ==
Line 22: Line 18:
  
 
* [https://www.pinguin.lu/index.php Pinguin's HQ]
 
* [https://www.pinguin.lu/index.php Pinguin's HQ]
 +
* [http://files.pinguin.lu/projects/HOWTO-BootingAcquiredWindows.pdf HOWTO: Booting an acquired hard disk image containing a Windows installation using xmount and OpenGates].

Revision as of 08:55, 23 September 2012

xmount
Maintainer: Daniel Gillen
OS: Linux , Mac OS X
Genre: Image mounting
License: GPL
Website: www.pinguin.lu

Description taken from xmount site on Pinguin's HQ:

xmount allows you to convert on-the-fly between multiple input and output harddisk image types. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. The virtual representation can be in raw DD, VirtualBox's virtual disk file format or in VmWare's VMDK file format. Input images can be raw DD, EWF (Expert Witness Compression Format) or AFF (Advanced Forensic Format) files. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike.

See Also

External Links