ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between pages "Portable Executable Format" and "Libvmdk"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(External Links)
 
(Created page with "{{Infobox_Software | name = libvmdk | maintainer = Joachim Metz | os = Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows | genre = {{Disk ...")
 
Line 1: Line 1:
{{expand}}
+
{{Infobox_Software |
 +
  name = libvmdk |
 +
  maintainer = [[Joachim Metz]] |
 +
  os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] |
 +
  genre = {{Disk imaging}} |
 +
  license = {{LGPL}} |
 +
  website = [http://code.google.com/p/libvmdk/ code.google.com/p/libvmdk] |
 +
}}
  
The '''Portable Executable Format''' is used by [[Windows]] to store executable code.
+
The '''libvmdk''' package contains a library and applications to read the [[VMWare Virtual Disk Format (VMDK)]] format.
The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
+
  
== See Also ==
+
== Tools ==  
* [[Windows Event Log (EVT)]]
+
The '''libvmdk''' package contains the following tools:
* [[Windows XML Event Log (EVTX)]]
+
* '''vmdkinfo''', which shows the information about VMDK files.
 +
* '''vmdkmount''', which FUSE mounts VMDK image files.
  
== External Links ==
+
== Examples ==  
  
* [http://en.wikipedia.org/wiki/Portable_Executable Wikipedia: Portable Executable]
+
FUSE mounting a VMDK image
* [http://msdn.microsoft.com/en-us/library/windows/hardware/gg463119.aspx PE and COFF Specification], by [[Microsoft]]
+
<pre>
* [http://blog.dkbza.org/search/label/pefile Blog about pefile], by [[Ero Carrera]]
+
vmdkmount image.vmdk mount_point
* [http://code.google.com/p/libexe/downloads/detail?name=Executable%20%28EXE%29%20file%20format.pdf Executable (EXE) file format], by the [[libexe|libexe project]], October 2011
+
</pre>
  
== Tools ==
+
== History ==  
* [http://code.google.com/p/pefile/ pefile is a Python module to read and work with PE (Portable Executable) files], by [[Ero Carrera]]
+
  
=== Resources ===
+
Libvmdk was created by [[Joachim Metz]] in 2009.
* [http://www.angusj.com/resourcehacker/ Resource Hacker], by [[Angus Johnson]]
+
  
[[Category:File Formats]]
+
== Also See ==
 +
* [[VMWare Virtual Disk Format (VMDK)]]
 +
 
 +
== External Links ==
 +
* [http://code.google.com/p/libvmdk/ libvmdk project site]

Revision as of 19:17, 20 September 2012

libvmdk
Maintainer: Joachim Metz
OS: Linux, FreeBSD, NetBSD, OpenBSD, Mac OS X, Windows
Genre: Disk imaging
License: LGPL
Website: code.google.com/p/libvmdk

The libvmdk package contains a library and applications to read the VMWare Virtual Disk Format (VMDK) format.

Tools

The libvmdk package contains the following tools:

  • vmdkinfo, which shows the information about VMDK files.
  • vmdkmount, which FUSE mounts VMDK image files.

Examples

FUSE mounting a VMDK image

vmdkmount image.vmdk mount_point

History

Libvmdk was created by Joachim Metz in 2009.

Also See

External Links