RT @cYb3rDaW6: New blog post: Get from E01 to live Virtual Machine (with no image conversion) > goo.gl/LYdHr #dfir (via @brad_garnett)