Accessing Volume Shadow Copies within a forensic image

There are commercial tools that provides access to the Volume Shadow Copies within a forensic image, but how can access this source of data using only free tools? Here three method that i use, enjoy! Using a VMWare VM Using raw2vmdk create a VMWare virtual disk (.vmdk) file from the image, for example: java -jar raw2vmdk.jar ./disk.img…

Article Link: https://www.andreafortuna.org/dfir/accessing-volume-shadow-copies-within-a-forensic-image/