Home› General

Problems Importing VMDK image into EnCase Forensic 20.4

Respond
JCSFJCSF
in General

I have a 22GB VMDK image file that I tried to import into EnCase Forensic 20.4.0.120. After adding the image file, it only shows Unused Disk Area. No partitions, or volumes. I scanned for LVM under device as well as ran Audit Drive Space Results EnScript to no effect. I also tired to mount the VMDK volume using FTK Imager Mount feature and the volume still comes up as Unused Disk Space.

Is there anything else that I missed? I do not have a VMX file associated with this VMDK image nor do I have access to VMWARE software at this point to mount the image natively.

Any thoughts or feedback is welcome.

Sign In or Register to comment.