Download PDF User Manual

Transcript
Chapter 27 – Live Boot
Does the Image mount independently in Mount Image Pro v6?

Run Mount Image Pro v6 as a stand-alone program;
o
Ensure that Mount Image Pro is activated;
o
Ensure that Mount image Pro drivers are correctly installed, as
shown in Figure 251 below:
Figure 251, Mount Image Pro drivers

Manually mount the required image in Mount Image Pro using: Mount Disk;
PNP; Write to Cache. Confirm that the image mounts successfully.
Does the image that you are trying to boot contain a valid Windows File System?

In the Forensic Explorer File System module, examine the file and folder
structure to confirm that the image has a valid bootable Windows file
system. Check that this folder is also accessible in the mounted image.
27.7.4 VMWARE CHECKS
BIOS – INTEL VIRTUALIZATION TECHNOLOGY
The live boot of a 64-bit virtual machine can require Intel Virtualization Technology
to be enabled in the forensic workstation bios. Additional information can be found
at:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&
cmd=displayKC&externalId=1003944

http://www.hardwaresecrets.com/article/everything-you-need-to-knowabout-the-intel-virtualization-technology/263
VMWARE PROCESSOR CHECK UTILITY FOR 64-BIT COMPATIBILITY
Ensure that your forensic workstation is capable of running a 64-bit virtual machine.
Download the test utility VMware-guest64check[ver].exe using via the link below:
“When you power on a virtual machine with a 64-bit guest operating
system, Workstation performs an internal check: if the host CPU is not a
supported 64-bit processor, you cannot power on the virtual machine.
VMware also provides this standalone processor check utility, which you can
use without Workstation to perform the same check and determine whether
Copyright GetData Forensics Pty Ltd 2010 - 2015, All rights reserved.
331 | P a g e