|
Mount
EnCase/Expert Witness (.E01 files), VMWare Disk (.vmdk files), FTK,
SMART or dd files
locally or over the
network.
Convert EnCase/Expert
Witness
and .vmdk files to "flat" image files
Mount
password protected
EnCase/Expert Witness .E01 files without the password
Mount
file systems from within dd images or Macintosh .dmg images
Mount
file systems from within FTK images
No
need to re-acquire evidence, no need for write-blockers.
Smart
Mount is a utility that allows you to mount filesystems contained in
logical and physical disk image files. It automatically detects the
partitions and filesystems in your images. Simply point and click the
volume(s) you wish to mount. It's that easy!
Filesystems mounted in Smart Mount behave just like regular volumes.
They are assigned a drive letter in Windows and a filesystem mountpoint
in Linux. You can browse these volumes in your favorite GUI environment
using any tools you like. Tools that index, search, recover, carve, repair or examine images and filesystems work as you would expect.
Multiple layers of write-protection ensure that the data in your image
files will not be modified. Smart Mount Pro provides a protected read/write mount mode, writes are
redirected to a separate overlay file. Changes made in past Smart Mount
sessions can be included by reusing an overlay file. Overlay files can
also help you detect and isolate changes made while the image is booted
in a virtual machine.
Smart Mount automatically recognizes and supports many common disk
image formats. Even if you have an EnCase/Expert Witness image made up
of 300 segment files, Smart Mount makes it easy. What's more, Smart
Mount allows other applications to access the image data even if those
applications don't support split images or special formats. There is no
need to waste time and storage space re-imaging your data! Just fire up
Smart Mount and within seconds your image data is unlocked and ready to
use with any application that supports dd-style images (in Linux) or
can operate on a drive letter (in Windows).
What
disk image formats are supported?
- raw
(dd-style) images
- SMART for Linux images
- Expert
Witness/EnCase Format (including ".E01" style files)
- VMWare
Virtual Disk files (including sparse and segmented VM disks)
- Smart
Acquisition Workshop format
- ...and
more coming soon!
What
partitioning schemes are supported?
Some other
image-mounting utilities require you to specify partition offsets
manually. Put away that calculator and start using Smart Mount!
- MBR (Normal PC Partitions)
- EFI / GPT
(MBR Replacement; used by Apple and others)
- APM
(Legacy Apple Partitions)
- ...and more
coming soon!
What
filesystem types are supported?
Almost any filesystem supported by the underlying OS can be mounted
using Smart Mount.
- Microsoft Windows includes
support for NTFS, FAT, ISO (cdrom), and UDF (dvd).
Third party
drivers for other
common filesystems (such as HFS+ and Ext3) are available for free
online.
- Linux supports over
40 different filesystems. Most distributions include support
for the majority of these filesystems "out of the box", with no extra
installation or configuration required.
Smart
Mount provides automatic detection of the following filesystem types,
which helps automate the mounting process.
- NTFS
- FAT12,
FAT16, FAT32
- HFS and HFS+ (including HFSJ and
HFSX)
- Ext2 and Ext3
- ISO9660
(CD-ROM)
- UDF (DVD)
- ...and
more coming soon!
|