Image mounting involves mounting the evidence disk image on the local system so the data on the disk can be analyzed and inspected.

In this lab, an evidence hard disk image is present on an external disk mounted on ‘/dev/sdc’. The ewf-tools are installed on the lab machine. Also, a flag file is kept in the /root directory of the disk image filesystem. 

Objective:Mount the evidence disk image using ewf-tools and retrieve the flag!

The solution for this lab can be found in the following manual: https://assets.ine.com/labs/ad-manuals/walkthrough-1795.pdf