Virtual Forensic Computing (VFC) v5.1.1.4576
Virtual forensic computing is a method by which an investigator can boot a forensic image of a suspects computer and operate it in a virtual environment. A virtual machine can be created from a forensic image, a write blocked physical disk or a 'DD' raw flat file image. Virtual forensic computing utilizes a mounted disk and VMWware or VirtualBox to re-create a subject machine in a matter of minutes. The investigator can then experience the 'desktop' as seen by the original user in an entirely forensic manner and use it in a protected virtual environment.
Comments
Post a Comment