Difference between revisions of "Xmount"

From Forensics Wiki
Jump to: navigation, search
Line 10: Line 10:
 
Description taken from xmount site on Pinguin's HQ:
 
Description taken from xmount site on Pinguin's HQ:
  
xmount allows you to convert on-the-fly between multiple input and output harddisk image types. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. The virtual representation can be in [[Raw Image Format|raw DD]], VirtualBox's virtual disk file format or in [[VMWare Virtual Disk Format (VMDK)|VmWare's VMDK file format]]. Input images can be raw DD, [[Encase image file format|EWF (Expert Witness Compression Format)]] or [[AFF|AFF (Advanced Forensic Format)]] files. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike.
+
xmount allows you to convert on-the-fly between multiple input and output harddisk image types. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. The virtual representation can be in [[Raw Image Format|raw DD]], [[Virtual Disk Image (VDI)|VirtualBox's virtual disk file format]] or in [[VMWare Virtual Disk Format (VMDK)|VmWare's VMDK file format]]. Input images can be raw DD, [[Encase image file format|EWF (Expert Witness Compression Format)]] or [[AFF|AFF (Advanced Forensic Format)]] files. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike.
  
 
== Examples ==
 
== Examples ==

Revision as of 08:54, 23 September 2012

xmount
Maintainer: Daniel Gillen
OS: Linux , Mac OS X
Genre: Image mounting
License: GPL
Website: www.pinguin.lu

Description taken from xmount site on Pinguin's HQ:

xmount allows you to convert on-the-fly between multiple input and output harddisk image types. xmount creates a virtual file system using FUSE (Filesystem in Userspace) that contains a virtual representation of the input image. The virtual representation can be in raw DD, VirtualBox's virtual disk file format or in VmWare's VMDK file format. Input images can be raw DD, EWF (Expert Witness Compression Format) or AFF (Advanced Forensic Format) files. In addition, xmount also supports virtual write access to the output files that is redirected to a cache file. This makes it possible to boot acquired harddisk images using QEMU, KVM, VirtualBox, VmWare or alike.

Examples

See HOWTO: Booting an acquired hard disk image containing a Windows installation using xmount and OpenGates.

See Also

External Links