Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== Forensic ====== {{:forensic.jpg|Forensic}} ===== Disk dump into virtual machine ===== <code> VboxManage convertfromraw img.raw output.vdi --format VDI </code> ===== Windows ===== [[https://www.jaiminton.com/cheatsheet/DFIR/#|Windows Forensic]] cheatsheet/forensic.txt Last modified: 2024/10/14 20:59by 127.0.0.1