Virtual Forensic Computing (VFC): Boot mounted EnCase images

VFC2 Quick Start Guide

If mounting from a forensic image file, Mount the physical drive will a mounting utility such as Mount Image Pro (www.mountimage.com).

1. Select the mounted physical disk from the VFC drop down menu (if VFC is already running, you may need to use the Refresh button to ensure all mounted drives are visible to the VFC application)

2. Select the boot partition

3. Adjust the OS, RAM and date / time (if required) [these values are auto-populated by VFC and can be left alone]

4. Specify a name for the virtual machine (default is New Virtual Machine) and specify a name for the virtual disk cache (default is New Virtual Disk)

5. Generate the Virtual Machine and use the Launch button to use the requisite VMware application (alternatively the VMware application can be loaded separately and the Virtual Machine can be launched manually)

VFC2 configuration screen

VFC2