User:Bgs876/sandbox
| Developer(s) | Arsenal Recon |
|---|---|
| Initial release | September 25, 2013 |
| Written in | C |
| Operating system | Windows |
| Type | Computer Forensics |
| License | Dual License |
| Website | arsenalrecon |
Image Mounter is the image mounting module for Registry Recon, which allows for forensic images to be mounted as physical disks in Windows. Blurb about why it was decided to make the module available as open source. Arsenal Image Mounter's Storport miniport driver is written in C and its user mode API library is written in [[Visual Basic.net|VB.NET], which facilitates easy integration with .NET 4.0 applications. Arsenal chose a dual license for Arsenal Image Mounter to allow its royalty-free use by open source projects (AGPL v3[1] compatible) but require financial support for ongoing development from commercial projects.
Features
Arsenal Image Mounter mounts the contents of disk images as complete disks in Microsoft Windows. Arsenal Image Mounter includes a virtual SCSI adapter (via a unique Storport miniport driver) which allows users to benefit from disk-specific features in Windows like integration with Disk Manager, access to Volume Shadow Copies, and more. As far as Windows is concerned, the contents of disk images mounted by Arsenal Image Mounter are “real” SCSI disks.
Many image mounting solutions mount the contents of disk images in Windows as shares or partitions, which limits their usefulness. While developing the digital forensics tool Registry Recon, Arsenal found existing image mounting solutions lacking and built Arsenal Image Mounter. Ongoing development of Arsenal Image Mounter has broader goals which benefit the entire information technology community in addition to digital forensics and incident response practitioners.
Supported Operating Systems
- Windows 8
- Windows 7
- Windows Vista
- Windows XP (as a non-pnp ISA SCSI Port miniport driver)
- Windows Server 2012
- Windows Server 2011
- Windows Server 2010
- Windows Server 2008 (and R2)
- Windows Server 2003 (with KB932755)
Supported File Systems
- Any filesystem with a driver installed is supported
- NTFS, FAT32, ReFS, exFAT, HFS+, UFS, and ext3 have all been tested
Supported Image Formats
- Raw (dd)
- EnCase (E01… if libewf is available)
- Virtual Machine Disk Files (VHD, VDI, XVA, VMDK… if discutils is available)
Future?
Any plans? Any derivative software hopes?
See also
References
Notes
External links
Category:Free software Category:Computer forensics Category:Digital forensics software