Autopsy & Virtual Machine Images

Any Autopsy specific discussions, events, module releases, that don't fall into the other categories.

Moderator: carrier

Autopsy & Virtual Machine Images

Postby chaoticmachinery13 » Fri Jan 08, 2016 12:33 am


I am running a ingest on an image with multiple virtual machine images (Qemu (qcow) and Virtualbox (vdi)). Does Autopsy mount those images and ingest those? Or does it do the file as a whole?

During the add data source phase, when it hit those files, it seems to just sit there.

Posts: 3
Joined: Wed Jan 06, 2016 8:58 pm

Return to Autopsy General

Who is online

Users browsing this forum: No registered users and 1 guest