In this episode, we’re going to take a look at how to mount VHD or VHDX images within the SIFT Workstation or other Linux system. This is particularly useful for data acquisitions performed with KAPE, which can generate these images (if you aren’t familiar with KAPE, please see the “Introduction to KAPE” episode listed below).
*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***
🖥 Commands used in this episode 🖥
sudo apt install libguestfs-tools
sudo virt-list-filesystems /path/to/vhdx
sudo guestmount -a /path/to/vhdx -m /dev/xxxx -r /path/to/mountpoint -o allow_other
Introduction to KAPE:https://www.youtube.com/wat...
Background Music Courtesy of Anders Enger Jensen:https://www.youtube.com/use...
#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics #KAPE