https://github.com/noxdafox/vminspect

Tools for inspecting disk images
https://github.com/noxdafox/vminspect

forensic-analysis forensics malware-analysis python virtualization vulnerability-scanners

Last synced: 5 months ago
JSON representation

Tools for inspecting disk images

• Host: GitHub
• URL: https://github.com/noxdafox/vminspect
• Owner: noxdafox
• License: bsd-3-clause
• Created: 2016-01-02T12:30:31.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2018-11-23T09:51:38.000Z (about 7 years ago)
• Last Synced: 2025-06-30T11:06:00.217Z (7 months ago)
• Topics: forensic-analysis, forensics, malware-analysis, python, virtualization, vulnerability-scanners
• Language: Python
• Homepage:
• Size: 104 KB
• Stars: 25
• Watchers: 6
• Forks: 7
• Open Issues: 0
• Metadata Files:
  • Readme: README.rst
  • License: LICENSE.txt

Awesome Lists containing this project

README

          
VMInspect

=========

:Source: https://github.com/noxdafox/vminspect

:Documentation: https://vminspect.readthedocs.io

:Download: https://pypi.python.org/pypi/vminspect

|docs badge|

.. |docs badge| image:: https://readthedocs.org/projects/vminspect/badge/?version=latest

   :target: https://vminspect.readthedocs.io

   :alt: Documentation Status

A collection of helpers for inspecting Virtual Machine disk images.

Useful for computer forensics analysis and for tests validation.

Disclaimers

-----------

Even though all the precautions have been taken, if misused this library can cause corruption and data loss within the disk images. Always make a copy of the disk images before analysing them.

The author is not responsible for any damage or data loss deriving from the usage of this tool.

Analysing disk images may take several minutes a fair amount of computation resources.

To improve analysis speed, ensure Hardware Acceleration (KVM) is enable on the host.

Dependencies

------------

Python 3: https://www.python.org/

libguestfs: http://libguestfs.org/

hivex: http://libguestfs.org/hivex.3.html

Pebble: https://pypi.python.org/pypi/Pebble

Requests: https://pypi.python.org/pypi/requests/

Python Evtx: https://pypi.python.org/pypi/python-evtx/