- Windows Forensics Cookbook
- Oleg Skulkin Scar de Courcier
- 127字
- 2021-07-02 20:57:45
Mounting forensic images with Arsenal Image Mounter
Arsenal Image Mounter is an open source tool developed by Arsenal Recon. It can help a digital forensic examiner to mount a forensic image or virtual machine disk in Windows. It supports both E01 (and EX01) and RAW forensic images, so you can use it with any of the images we created in the previous recipes.
It's very important to note that Arsenal Image Mounter mounts the contents of disk images as complete disks. The tool supports all file systems you can find on Windows drives: NTFS, ReFS, FAT32, and exFAT. Also, it has temporary write support for images, which is a very useful feature, for example, if you want to boot the system from the image you are examining.
推薦閱讀
- Flask Web全棧開發實戰
- Java程序設計與開發
- 在最好的年紀學Python:小學生趣味編程
- Android項目開發入門教程
- 新編Premiere Pro CC從入門到精通
- Web全棧工程師的自我修養
- The Data Visualization Workshop
- Creating Stunning Dashboards with QlikView
- Android項目實戰:手機安全衛士開發案例解析
- Mastering PowerCLI
- IBM RUP參考與認證指南
- Yii2 By Example
- Learning Alfresco Web Scripts
- Building E-Commerce Solutions with WooCommerce(Second Edition)
- Python深度學習:基于PyTorch