Virtual Image Files

Any Autopsy specific discussions, events, module releases, that don't fall into the other categories.

Moderator: carrier

Virtual Image Files

Postby tmag20 » Wed Mar 30, 2016 5:07 pm

Does Autopsy parse VMware (VMDK) image files as an image ingest or data source?

In the Autopsy/docs/user-docs/data-sources it shows a screenshot of selecting an image or VM File as a data source. I don't have the VM Files option in the latest version of Autopsy (4.0) that I have installed. I tried to add a VM file (VMDK) as an image but Autopsy produced an error when it tried to analyze and parse the data.
tmag20
 
Posts: 2
Joined: Wed Mar 30, 2016 4:50 pm

Return to Autopsy General

Who is online

Users browsing this forum: No registered users and 1 guest

cron