In this episode, we’ll take an in-depth look at Arsenal Image Mounter. We’ll start with the basics and cover the functionality included in the free version. Then, we’ll look at advanced features including the ability to launch VMs from disk images, password bypass and password cracking, and working with BitLocker encrypted disk images.
*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***
📖 Chapters
00:00 – Intro
00:57 – Free Mode
07:55 – Professional Mode
08:43 – Launch a VM from a Disk Image
09:28 – Fixing a Common Issue
12:21 – Windows Authentication Bypass
14:55 – About DPAPI
16:36 – DPAPI: Password Attack Functionality
19:49 – Mounting VSCs
22:36 – Launch a VM from a VSC
23:45 – More VSC Options
26:08 – Working with BitLocker Images
🛠 Resources
Enable Hyper-V (or reset the priority):
DISM /Online /Enable-Feature /All /FeatureName:Microsoft-Hyper-V
Arsenal Recon Password Sledgehammer Database:
#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics
[ad_2]
source
