This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
VMWare Virtual Disk Format (VMDK)
There are multiple types of VMWare Virtual Disk Format (VMDK) data files:
- 2GbMaxExtentFlat (twoGbMaxExtentFlat); descriptor file (name.vmdk) with RAW data extent files (name-f###.vmdk). This image type is basically a split RAW image.
- 2GbMaxExtentSparse (twoGbMaxExtentSparse); descriptor file (name.vmdk) with VMDK sparse data extent files (name-s###.vmdk)
- monolithicSparse; VMDK sparse data extent files (name.vmdk) which contains the descriptor file data.
The descriptor file defines how and where the data of the VMDK image is stored. The data is stored in extent data files.
Extent file types
There are multiple types extent files:
- RAW data file or device
- VMDK sparse data file
- COWD sparse data file