VMDK Forensic Artifact Extractor (VFAE)

License: Free ‎File size: N/A
‎Users Rating: 2.7/5 - ‎6 ‎votes

Windows C++ console application to extract files from a VMDK file in support of forensic investigations utilizing the Virtual Disk Development Kit (VDDK 1.2) API's. Application output produces MD5 hash values (for files extracted) and summary file.

VERSION HISTORY

  • Version exe posted on 2011-04-10
    Several fixes and updates
  • Version N/A posted on 2011-04-10

Program Details