[Qemu-devel] Creating a VM from an E01 file

[Cervellone, Adam]

To whom it may concern,

 

My name is Adam Cervellone. I am a digital evidence intern at the North Carolina State Crime Laboratory.  As part of my time here, I am conducting a research project using the SIFT workstation to make a virtual machine of an E01 file.  I’ve previously used this series of commands to attempt to create a VM

1.            Sudo su

o             SIFT password entered

2.            Mkdir /mnt/ewf1

3.            Mount_ewf.py <E01 image file path> /mnt/ewf1

4.            qemu-img convert /mnt/ewf1/<E01 image file name> -O vmdk <give_a_name>.vmdk  

I found these steps on Forensics wiki, however they have not worked.  I may have misinterpreted a section of the command and entered it incorrectly.  Do you know of the correct way to do this or of someone who may be able to help me?

 

Thank you,

Adam Cervellone