Introduction to forensics tool Live View

Live View is used to convert the copied disk or partition image to the virtual disk format recognized by VMware. For example, the virtual machine can load the DD image file obtained by using the DD command, automatically detect the partition format and operating system, and support startup. He needs to have jre1.5 +, vmware5.5 +, and VMWare disk Mount programs installed in the system. However, he deleted and compressed the original disk image, and could not restore the file from it. He could only store normal files.

 

Http://liveview.sourceforge.net/

 

Live View is capable of booting

• Full disk raw images
• Bootable partition raw images
• Physical disks (attached via a USB or FireWire Bridge)
• Specialized and closed image formats (using 3rd party image mounting software)

Containing the following operating systems

• Windows 2003, XP, 2000, NT, me, 98
• Linux (limited support)