Live View
Friday, 01 September 2006 by Michel Roth
Live View is a Java-based graphical forensics tool that creates a VMware virtual machine out of a raw (dd-style) disk image or physical disk. This allows the forensic examiner to "boot up" the image or disk and gain an interactive, user-level perspective of the environment, all without modifying the underlying image or disk. Because all changes made to the disk are written to a separate file, the examiner can instantly revert all of his or her changes back to the original pristine state of the disk. The end result is that one need not create extra "throw away" copies of the disk or image to create the virtual machine.

Live View is capable of booting:

• Full disk raw images
• Bootable partition raw images
• Physical Disks (attached via a USB or Firewire bridge)

Containing the following operating systems:

• Windows XP, 2000, 2003, NT, Me, 98
• Linux (limited support)

Behind the scenes, Live View automates a wide array of technical tasks. Some of these include: resolving hardware conflicts resulting from booting on hardware other than that on which the OS was originally installed; creating a customized MBR for partition-only images; and correctly specifying a virtual disk to match the original image or physical disk.

Check it out here.

Thanks to Virtualization.info for the news.

Related Items:

Extending partitions With GParted (6 November 2006)
The Virtues Of Virtualization (21 December 2006)
Using P2V Tools In A Microsoft Virtual Server 2005 R2 Environment (19 April 2007)
Acronis Joins VMware Technology Alliance Partner Program (1 November 2006)
The Single Most Important Virtual Machine Performance Tip (31 October 2006)
VMware Introduces Open Virtual Machine Disk Format Specification (3 April 2006)
Exporting VMware Server Beta Virtual Machines To ESX Server 2.x (20 April 2006)
Citrix Presentation Server With Ardence OS Streaming (3 September 2007)
Using Ardence Disk Streaming with Citrix Servers (23 March 2006)
Easy VMDK Conversions (15 January 2007)
Comments (0)
Show/Hide comment form