Skip to content

Latest commit

 

History

History
20 lines (12 loc) · 1.05 KB

README.md

File metadata and controls

20 lines (12 loc) · 1.05 KB

This is an extension for Drive Badger. It provides a so called hook script, that:

  • scans given filesystem for virtual drive image files (*.vmdk for VMware, *.vhd and *.vhdx for Hyper-V)
  • mounts and exfiltrates found files (instead of just copying the whole images to the storage drive)

Installing

Clone this repository as /opt/drivebadger/hooks/hook-virtual directory on your Drive Badger persistent partition.

When you install this hook, you should also install exclude-virtual configuration repository - it excludes additional files: ISO images and Hyper-V virtual machine state files.

Also, you should read notes about fine tuning this hook.

More information