Reply to comment
Live View 0.6: Forensics Virtualization Tool
Submitted by todd on Tue, 2008-03-11 22:55This is definitely a tool with narrow interest. But, I found it interesting, so here it is...
Live View comes from CERT (the cyber security group over at Carnegie Mellon). Rather than paraphase, here's a direct quote from their site describing it: Live View is a Java-based graphical forensics tool that creates a VMware virtual machine out of a raw (dd-style) disk image or physical disk. This allows the forensic examiner to "boot up" the image or disk and gain an interactive, user-level perspective of the environment, all without modifying the underlying image or disk.
I haven't had to use it yet. But, I'm glad I read about it recently and can tuck away in my mental notebook just in case...



Recent comments
2 days 4 hours ago
4 days 17 hours ago
5 days 1 hour ago
1 week 4 hours ago
1 week 1 day ago
1 week 1 day ago
2 weeks 2 hours ago
3 weeks 13 hours ago
3 weeks 2 days ago
3 weeks 4 days ago