OSFMount allows you to mount local dd image files (bit-for-bit copies of a disk partition) in Windows. You can then analyze the disk image file with PassMark OSForensics by using the mounted volume drive letter. By default, the image files are mounted as read only so that the original image files are not altered.
Yes
- Fixed OSFMount driver load error in Win2k3 64-bit
- OSFMount command line now supports setting drive type (eg. CD, HD, FD) via the -o option
No comments yet