The customer is pretty desperate at this point. If the actual VM itself cannot be recovered, it is at all possible to use forensic methods to extract specific data from the disk storage files within? Is the vma.dat file readable at all?
Yes. I figured a standard VM restore would not be out of the question. But I was wondering if the dat file itself could be a examined for some sort of partial data extracttion of files and folders that existed on virtual disk of the VM?
You can run `vma extract vma.dat SomeDirName` and see what comes out. There's a chance you'll get a disk image file `SomeDirName/tmp-disk-drive-scsi0.raw` for example, containing the equivalent of having filled the VM's drive with zeros starting at some random point in the middle wherever the backup got stopped. After plugging that into a VM you can use the usual file recovery tools like with a physical disk and then it'll boil down to luck...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.