SafeVM Pro from Pansafe used to generate the virtual machine configuration file forensics tools. SafeVM Pro image file can be as evidence of the computer system’s hard disk or objects modeled as a virtual machine, start in a virtual machine environment, forensic investigators can interactively and the system checks the user’s point of view visual system and operating objectives collect relevant evidence. SafeVM Pro forensic investigations take full account of the requirements, protect the original image file or physical hard disk in the objective computer system, investigators will not affect to original equipment operations.
SafeVM Pro blocks the technical details of the virtual machine configuration, and automatically adjusts the parameters of the virtual machine files, reduces the virtual machine startup failure, and the difficulty of forensic investigations.
Technical Features
- Provide a full disk image file
- Provide bootable partition image file
- Apply to the physical hard disk or other storage device (via USB, 1394 and other interface connection)
- Apply to DD format image file (DD or Split DD)
- Through SafeMount™ support Encase™、 AFF image file format
- Automatically identify the type of operating system
- Apply to the common Windows operating systems: Windows 7, Windows Vista, 2003, XP, 2000, NT, Me, 98
- Apply to the Linux operating system
- Provide simulation of the operating system of AMD architecture
- The password for extraction of Windows operating system :Hash
- Provide the function with CD-Rom boot priority
- Automatically solve the fault cannot startup virtual machine
- Configure Windows operating system with auto-startup
- Bypass the activation mechanism of Windows operating system
- Any operations within the virtual machine will not affect image file or original equipment
- Chinese graphical user interface and easy to use
Enhanced features
Case Management
Can handle multi-cases and single case with multiple virtual machine case
Loading disk partition in the virtual machine
Virtual machines that have been generated and not running, loading the selected virtual machine partition drive letter not used within the system
Configuration tools after the virtual machine
- No activation in Windows
- Blue Screen repair, offline repair in Windows
- Services and drive (offline) before starting the configuration of the virtual machine in Windows
- Automatically activated (offline) before starting the configuration of the virtual machine in Windows
- The configuration after the startup failure in Windows
- Access to the Hash value of the SAM file in Windows