Click OK and walk away for a few minutes while it captures the image.Īfter the image has been captured the next step is to use the VirtualBox command line tool to convert it into a VDI file. In this box you’ll want to select PHYSICALDRIVE2 as the source drive, choose the destination to save the file, and most importantly, choose the UNIX style DD format. Now open ProDiscover Basic, cancel the prompt to start a new case if that comes up, go to the action menu and click on capture image.
I left the other 3 options as default.Īfter it has mounted you may see in the window that there are multiple partitions.You’ll want to pay attention to the As column and in this case, the one called PHYSICALDRIVE2 in my example. The only way I got this to work was telling it to mount as physical and logical. Browse to where your image is located and select the first file in the span and click open.Īfter you click on the Mount Disk button a window will pop up where you can select some options. Open Mount Image Pro, click the mount button, click on add image. Here are my steps, with lovely screenshots. There may be free alternatives out there that can do the same thing and can probably be swapped out easily for those steps. This is meant for students of my class who already have access to a demo version of ProDiscover Basic.
Mount Image Pro is only a trial version, but it will work perfectly for this. Software used: Mount Image Pro, ProDiscover Basic, and VirtualBox. I then used Virtualbox’s command line tool to convert the new DD image file into their virtual hard drive file, a VDI. I then used ProDiscover Basic to capture an image of the “disk” – essentially capturing an image of an image. What I ended up doing was mounting the spanned image on my machine as another “disk” on my computer. I had no luck at all with that, but I did get another idea because of a previous assignment in this class (computer forensics).
I looked online for 40-45 minutes trying to figure out how to merge all the segments into one file.
I originally tried converting each segment into the VirtualBox VDI file just to see if I could get something usable, but that wasn’t successful. It was an old image of a Windows 2000 machine that was spanned in 650MB blocks, a total of 10 files. I was given the task of trying to figure out how to boot a spanned DD image file as a virtual machine in the software of my choice.