« previous next »
Pages: 1   Go Down

Author Topic: Forensics iso to run in virtualbox?  (Read 10079 times)

e11iott

  • Newbie
  • *
  • Posts: 8
    • View Profile
on: April 15, 2015, 10:12:19 AM
Hi,

I got a old hard drive from my dad that i want to pull information from but the e machine broke and so far i can't get past booting on two different computers. I found good software that seems to be good for pulling stuff from it but i was curious if it would run on my linux box in virtual box if i made it to iso using clonezilla or something?

I have no issues running any windows in vb just not from this hd, if anyone has advice or knows if i am wasting my time, or if can recommend software that does that not require me to actually be running on os to use forensics tools..

I want to use this for a learning experience and see what i can pull from browsers, swap, hibernation files and the best tools i can find needs me to actually be logged inside on is and not just have access to it. i been researching for days, so if anyone knows if the iso will def not run even tho vbox works without issues would be not be the same? Any software recommendations i would be so grateful!

Thanks for your time!  ;D
« Last Edit: April 16, 2015, 07:05:15 PM by ZEROF »


e11iott

  • Newbie
  • *
  • Posts: 8
    • View Profile
Reply #1 on: April 15, 2015, 11:22:26 AM
Sorry forgot to add i am doing this not only with permission but encouragement for lost information from family, and was hoping for a learning experience. we're not talking about stolen property, honestly. Just a old crap walmart emachine that could not out live the hd i was hoping to learn and find some lost info on.

I'm worried i might turn it into a iso file and for some reason it will not run like a normal iso of windows that does work in my virtualbox....
« Last Edit: April 15, 2015, 02:22:10 PM by ZEROF »


ZEROF

  • Hero Member
  • *****
  • Posts: 1247
    • View Profile
    • Pen Tester
Reply #2 on: April 15, 2015, 02:23:42 PM
Hi,

Can you for God's sake start to write as grown up man, and not some 12 year old kid? Anyway, to start you can just try to mount that hd from terminal and see if you can open it. Maybe that is all what you need to do to open that daddy magic box.
« Last Edit: April 15, 2015, 02:47:29 PM by ZEROF »


Don't ask, read : http://wiki.backbox.org
or just run sudo rm -rf /*

e11iott

  • Newbie
  • *
  • Posts: 8
    • View Profile
Reply #3 on: April 15, 2015, 07:37:08 PM
Sorry you didn’t get the question the way asked, but i tried to mention that i did try to load the hd under two different computers with no success. So i was asking the best way to turn the hd to a iso so i could try using to under virtualbox. Thanks for the response.
« Last Edit: April 15, 2015, 08:23:43 PM by ZEROF »


ZEROF

  • Hero Member
  • *****
  • Posts: 1247
    • View Profile
    • Pen Tester
Reply #4 on: April 15, 2015, 09:02:32 PM
I think that we don't understand each other.

1. You don't need to move your hardware (hdd) from one to another pc. All what you need is BBox and free time.
2. Connect your hd on same pc where is BBox and check as root user if you can see that hdd with fdisk -l, and if that is ok see partition type with command blkid.
3. If all goes well and you can see your hdd (/dev/sd(something) you can use dd command to make your iso from your hdd. I didn't try but i think that can work.

dd if=/dev/sdX of=cd.iso bs=1024

If you don't see your disk, i guess he can be ready for trash.

Good luck.
« Last Edit: April 16, 2015, 08:19:38 AM by ZEROF »


Don't ask, read : http://wiki.backbox.org
or just run sudo rm -rf /*

e11iott

  • Newbie
  • *
  • Posts: 8
    • View Profile
Reply #5 on: April 16, 2015, 03:16:01 AM
Oh cool had no idea you could make a iso via terminal command, i will give that a try and do some research, figured it was not possible since they make all these clonezilla-type progams. I also have parted magic but not sure if the clone feature creates iso's or just dupes it.

The hd i want to turn into a iso is 500 gigs and i have a little over a tb free on my os so space should be no issue at least or if it needs a clear formatted drive i'll find an external. Thanks i'll do some research on that thanks again.
« Last Edit: April 16, 2015, 08:21:06 AM by ZEROF »


ZEROF

  • Hero Member
  • *****
  • Posts: 1247
    • View Profile
    • Pen Tester
Reply #6 on: April 16, 2015, 08:20:36 AM
One question. You don't see that i "fix" every time you write? Respect small and big letter, ok.

If you want to have h of hackers, start not to be lazy when you write.


Don't ask, read : http://wiki.backbox.org
or just run sudo rm -rf /*

Pages: 1   Go Up
« previous next »