H11 Digital Forensics.com

 
 

SMART Mount

ASR SMART Forensics

SMART Mount is a next generation forensic utility that allows you to mount numerous types of file systems contained in logical and physical disk image files. It automatically detects the partitions and file systems in your images. Simply point and click the volume(s) you wish to mount. It is truly just that easy!





For any 1 platform (Win32 or Linux or MacOSX) $399.00

For any 2 platforms $699.00
For any 3 platforms $999.00
Contact a forensics specialist: 1.801.596.2727
 

Smart Mount Features:

  • Mount SMART, EnCase.E01, VMWare Disk.vmdk, AccessData FTK.AD1, X-Ways or.dd files locally or over the network
  • Convert EnCase.E01 and.vmdk files to "flat" image files
  • Mount password protected EnCase.E01 files without the password
  • Mount file systems from within dd images or Macintosh.dmg images
  • Mount file systems from within FTK images
  • No need to reacquire evidence, no need for write-blockers

Supported Disk Formats:

  • Raw dd-style images
  • SMART for Linux images
  • Guidance Software EnCase.E01 images
  • AccessData Forensic Toolkit (FTK).AD1 images
  • VMWare Virtual Disk files (including sparse and segmented VM disks)
  • Smart Acquisition sparse/block optimized format
  • ...and more coming soon!

Partition Schemes:

Some other image-mounting utilities require you to specify partition offsets manually. Put away that calculator and start using SMART Mount!

  • MBR (Normal PC Partitions)
  • EFI/GPT (MBR Replacement; used by Apple and others)
  • APM (Legacy Apple Partitions)
  • ...and more coming soon!

Filesystem Types:

Almost any filesystem supported by the underlying OS can be mounted using SMART Mount.

  • Microsoft Windows includes support for NTFS, FAT, ISO (cdrom), and UDF (dvd).
  • Third party drivers for other common filesystems (such as HFS+ and Ext3) are available for free online.
  • Linux supports over 40 different filesystems. Most distributions include support for the majority of these filesystems "out of the box" with no extra installation or configuration required.

SMART Mount

Once mounted in SMART Mount, file systems behave just like regular volumes. They are assigned a drive letter in Windows and a file system mount point in Linux. You can browse these volumes in your favorite GUI environment using any tools you like. Tools that index, search, recover, carve, repair or examine images and file systems work as you would expect.

SMART Mount employs multiple layers of write-protection to ensure the data in your image files will not be modified. However, in support of those rare occasions that would require a read/write option, SMART Mount does provide a protected read/write mount mode (wherein written data is redirected to a separate overlay file). Changes made in past SMART Mount sessions can be included by reusing an overlay file. Overlay files can help you detect and isolate changes made while the image is booted in a virtual machine.

SMART Mount provides automatic detection of the following filesystem types, which helps automate the mounting process.

  • NTFS
  • FAT12, FAT16, FAT32
  • HFS and HFS+ (including HFSJ and HFSX)
  • Ext2 and Ext3
  • ISO9660 (CD-ROM)
  • UDF (DVD)
  • ...and more coming soon!
 
 

Forensic Software