OSFMount

What is OSFMount?

OSFMount is a versatile tool that allows users to mount local disk image files in Windows with a drive letter. These disk image files are bit-for-bit copies of disk partitions, enabling users to analyze the contents using PassMark OSForensics by accessing the mounted volume's drive letter. The application supports mounting disk images in various formats, including Raw Image (.IMG, .DD), Raw CD Image (.ISO, .BIN), Split Raw Image (.00n), Nero Burning ROM Image (.NRG), System Deployment Image (.SDI), Advanced Forensics Format Images (AFF), Advanced Forensics Format Images with metadata (AFM), Advanced Forensics Format Directories (AFD), and VMWare Image (.VMDK) One unique feature of OSFMount is its ability to create RAM disks, which are disks mounted directly into the system's RAM. This offers a significant speed advantage over using a physical hard disk, making it beneficial for applications that require high-speed disk access, such as databases, games, and web browsers that rely on cache files. Additionally, the use of RAM disks enhances security, as the disk contents are not stored on a physical hard drive and are not persistent after system shutdown Another noteworthy capability of OSFMount is its support for mounting CD images, which can be useful when a particular CD is used frequently, and the speed of access is crucial

Highlights

• Mount disk image files (bit-for-bit copies of disk partitions) in Windows with a drive letter for analysis using PassMark OSForensics
• Create RAM disks for high-speed disk access, beneficial for applications like databases, games, and web browsers
• Enhance security by storing disk contents in RAM instead of on a physical hard drive
• Support for mounting various disk image formats, including Raw Image, Raw CD Image, Split Raw Image, Nero Burning ROM Image, System Deployment Image, Advanced Forensics Format Images, and VMWare Image