This stores all writes to a 'write cache' (or 'delta') file which preserves the integriy of the original disk image file. OSFMount supports mounting disk image files as read/write in 'write cache' mode. Z:).īy default, the image files are mounted as read only so that the original image files are not altered.

\\.\PhysicalDrive1) or logical drive letter (eg. You can then analyze the disk image file with PassMark OSForensics™ by using the physical disk name (eg. OSFMount allows you to mount local disk image files (bit-for-bit copies of an entire disk or disk partition) in Windows as a physical disk or a logical drive letter.