OSFMount allows you to mount local DD image files (bit-for-bit copies of a disk partition) in Windows. You can then analyze the disk image file with PassMark OSForensics by using the mounted volume drive letter. By default, the image files are mounted as read only so that the original image files are not altered. OSFMount supports RAM disks, basically a disk mounted into RAM. This generally has a large speed benefit over using a hard disk. As such this is useful with applications requiring high speed disk access, such a database applications, games (such as game cache files) and browsers (cache files). A second benefit is security, as the disk contents are not stored on a physical hard disk (but rather in RAM) and on system shutdown the disk contents are not persistent. OSFMount supports mounting images of CDs, which can be useful when a particular CD is used often and the speed of access is important.
What's new in this version:
Version 1.5.1013 adds "DEBUGMODE" command line parameter to OSFMount (GUI) for debug logging.