Comments for Incident Response howto http://irhowto.wordpress.com Getting IR done using some elbow grease Sat, 29 Dec 2012 16:23:59 +0000 hourly 1 http://wordpress.com/ Comment on Creating a OS X Live IR CD-ROM by Useful OSX Command Line Programs | Agile Code Monkeys http://irhowto.wordpress.com/2010/08/07/creating-a-os-x-live-ir-cd-rom/#comment-349 Sat, 29 Dec 2012 16:23:59 +0000 http://irhowto.wordpress.com/?p=119#comment-349 [...] Sources: http://irhowto.wordpress.com/2010/08/07/creating-a-os-x-live-ir-cd-rom/ [...]

]]> Comment on Booting a dd image with Vmware by twsecblog http://irhowto.wordpress.com/2010/07/05/booting-a-dd-image-with-vmware/#comment-165 Wed, 14 Mar 2012 13:54:22 +0000 https://irhowto.wordpress.com/?p=93#comment-165 Lee,

After some quick googling it looks like this may be a hard drive mode/driver problem. If you switch from/to AHCI mode then the wrong driver will be loaded. Its possible that is whats going on. Safe mode should help you with this, and change the disk setting. Also you might want to use the latest version of VMWare player/Workstation if safe mode dosen’t help.

]]> Comment on Booting a dd image with Vmware by Lee http://irhowto.wordpress.com/2010/07/05/booting-a-dd-image-with-vmware/#comment-162 Sun, 11 Mar 2012 01:03:21 +0000 https://irhowto.wordpress.com/?p=93#comment-162 Well… first of all, I needed to enable Intel VT (Virtualization Technology) on my Dell E6400, 8G RAM, laptop, which got me closer… My Windows 7 64-bit Pro GUEST reaches to the point of booting (when the four Microsoft icons come together) and then gives me the blue screen. I get:

Technical Information:
*** STOP: 0x0000007B (0xFFFFF880009A9928, .. )

I can’t seem to find any meaningful solution for this error message, not even an individual who has tried Windows 7 64-bit Pro/Ultimate as a VMware GUEST, just 32-bit.

Regards,

]]> Comment on Booting a dd image with Vmware by twsecblog http://irhowto.wordpress.com/2010/07/05/booting-a-dd-image-with-vmware/#comment-161 Thu, 08 Mar 2012 16:24:22 +0000 https://irhowto.wordpress.com/?p=93#comment-161 I havent booted a 64-bit cloned drive of Windows 7. You might want to try safe mode boot first. Does the other system have some weird hardware? Maybe a TPM or something else that VMware is having issues with. Check the event log from safe mode. SHould give you a better idea what maybe happening.

]]> Comment on Booting a dd image with Vmware by Lee Ramos http://irhowto.wordpress.com/2010/07/05/booting-a-dd-image-with-vmware/#comment-160 Wed, 07 Mar 2012 19:47:25 +0000 https://irhowto.wordpress.com/?p=93#comment-160 Yes, the mmls does match. So, as you said it should be the same.
Thanks.

]]>