VMWare from hard drive images

From ForensicsWiki
Revision as of 17:41, 23 March 2012 by Pmow (Talk | contribs) (Added complete text steps.)

Jump to: navigation, search

Creating virtual machines from forensic images

After having no success with raw2vmdk, the Live View method has worked.

Live View requires:

-Java JRE

-VMWare Workstation 5.5+ or Server

-VMWare VDDK (download)


Install prerequisites followed by Live View (the installer will check for pre-reqs).

Tested: Win7-64 with VMWare Workstation 7.12, Live View 0.7b, and VMWare VDDK 5.0


VMX Creation

1. Run Live View as Administrator. (Messages pane will result in errors otherwise)

2. Set memory and OS as closely as possible to target machine specs. (To maximize probability of success)

3. Click "Start". (The screenshot error relates to maximums exceeded based on client machine.)