Arsenal Recon
@arsenalrecon.bsky.social
Developers of digital forensics weapons which include Arsenal Image Mounter, Hibernation Recon, LevelDB Recon, HBIN Recon, & Registry Recon. Arm Yourself! #DFIR
In case you missed it last week, a new Arsenal Image Mounter (v3.12.331) has been released with a long list of improvements for #DFIR practitioners including Arm on Arm virtualization. You can see some highlights in our Insights article at arsenalrecon.com/insights/qui....
November 5, 2025 at 4:44 PM
In case you missed it last week, a new Arsenal Image Mounter (v3.12.331) has been released with a long list of improvements for #DFIR practitioners including Arm on Arm virtualization. You can see some highlights in our Insights article at arsenalrecon.com/insights/qui....
Check out this awesome testimonial regarding launching Windows Volume Shadow Copies (VSCs) into virtual machines with AIM! Have you tried this in your own #DFIR casework yet? arsenalrecon.com
November 5, 2025 at 3:49 PM
Check out this awesome testimonial regarding launching Windows Volume Shadow Copies (VSCs) into virtual machines with AIM! Have you tried this in your own #DFIR casework yet? arsenalrecon.com
Are you a #DFIR practitioner in the New England area? Want to see Arsenal Image Mounter’s new functionality in person? Contact us & let’s set something up soon so you can see Arm on Arm virtualization, AIM Remote Agent enhancements, & more! arsenalrecon.com
November 3, 2025 at 2:17 PM
Are you a #DFIR practitioner in the New England area? Want to see Arsenal Image Mounter’s new functionality in person? Contact us & let’s set something up soon so you can see Arm on Arm virtualization, AIM Remote Agent enhancements, & more! arsenalrecon.com
Do you have a digital forensics workstation running Windows on Arm (WoA) in your lab yet? We have some thoughts about this towards the end of our latest Insights article at arsenalrecon.com/insights/qui.... Let’s discuss! #DFIR
November 2, 2025 at 6:54 PM
Do you have a digital forensics workstation running Windows on Arm (WoA) in your lab yet? We have some thoughts about this towards the end of our latest Insights article at arsenalrecon.com/insights/qui.... Let’s discuss! #DFIR
Check out our latest Insights article "Quick Tour Of New Features In Arsenal Image Mounter v3.12.331" to see highlights (lots of screenshots!) of the latest AIM functionality: arsenalrecon.com/insights/qui.... #DFIR
November 1, 2025 at 4:56 PM
Check out our latest Insights article "Quick Tour Of New Features In Arsenal Image Mounter v3.12.331" to see highlights (lots of screenshots!) of the latest AIM functionality: arsenalrecon.com/insights/qui.... #DFIR
Did you know that AIM Remote Agent can be run from SUMURI's PALADIN? See Anastasia boot a Surface Pro 5 w/ two 512gb drives, connect both drives to AIM across a network (w/ automatic Storage Spaces reassembly), & launch a virtual machine. arsenalrecon.com #DFIR
October 31, 2025 at 3:38 PM
Did you know that AIM Remote Agent can be run from SUMURI's PALADIN? See Anastasia boot a Surface Pro 5 w/ two 512gb drives, connect both drives to AIM across a network (w/ automatic Storage Spaces reassembly), & launch a virtual machine. arsenalrecon.com #DFIR
Did you know that Arsenal Image Mounter running on Windows on Arm (WoA) can launch virtual machines across a network from WoA laptops & tablets (booted in a forensically-sound manner, e.g. w/ WinFE or PALADIN) thanks to AIM Remote Agent? See it now! arsenalrecon.com #DFIR
October 30, 2025 at 6:25 PM
Did you know that Arsenal Image Mounter running on Windows on Arm (WoA) can launch virtual machines across a network from WoA laptops & tablets (booted in a forensically-sound manner, e.g. w/ WinFE or PALADIN) thanks to AIM Remote Agent? See it now! arsenalrecon.com #DFIR
Keep in mind, AIM Remote Agent also runs on Windows on Arm… so in addition to attaching WoA disk images & actual physical disks to AIM locally, WoA disks can be connected to AIM across a network when their hosts are booted safely with (e.g.) WinFE! #DFIR
October 29, 2025 at 2:58 PM
Keep in mind, AIM Remote Agent also runs on Windows on Arm… so in addition to attaching WoA disk images & actual physical disks to AIM locally, WoA disks can be connected to AIM across a network when their hosts are booted safely with (e.g.) WinFE! #DFIR
Are you a #DFIR practitioner? Take some time to focus on this screenshot. Windows on Arm laptops & tablets aren’t just coming, they’re here. The new Arsenal Image Mounter runs on WoA & seamlessly launches WoA disk images (& disks!) into virtual machines. arsenalrecon.com
October 29, 2025 at 2:14 PM
Are you a #DFIR practitioner? Take some time to focus on this screenshot. Windows on Arm laptops & tablets aren’t just coming, they’re here. The new Arsenal Image Mounter runs on WoA & seamlessly launches WoA disk images (& disks!) into virtual machines. arsenalrecon.com
We know ICAC Task Forces (www.icactaskforce.org) encounter Arm-based computers often & will leverage Arsenal Image Mounter’s new Arm functionality in very important ways. As a reminder, we provide a free Arsenal license to every ICAC Task Force. arsenalrecon.com #DFIR
October 28, 2025 at 5:17 PM
We know ICAC Task Forces (www.icactaskforce.org) encounter Arm-based computers often & will leverage Arsenal Image Mounter’s new Arm functionality in very important ways. As a reminder, we provide a free Arsenal license to every ICAC Task Force. arsenalrecon.com #DFIR
See the new Arsenal Image Mounter on a Samsung Galaxy Book Go (Snapdragon 7c Gen 2 CPU & only 4gb RAM!) launch a disk image from a Dell Inspiron 14 3420 (Snapdragon 8cx Gen 2, 8gb RAM) running Windows on Arm in S Mode into a virtual machine. Awesome. arsenalrecon.com #DFIR
October 28, 2025 at 2:39 PM
See the new Arsenal Image Mounter on a Samsung Galaxy Book Go (Snapdragon 7c Gen 2 CPU & only 4gb RAM!) launch a disk image from a Dell Inspiron 14 3420 (Snapdragon 8cx Gen 2, 8gb RAM) running Windows on Arm in S Mode into a virtual machine. Awesome. arsenalrecon.com #DFIR
Each Arsenal license purchased this week will come with a free seat of AIM Online Training (including one certification attempt) as we celebrate the release of the latest AIM yesterday. arsenalrecon.com #DFIR
October 28, 2025 at 1:27 PM
Each Arsenal license purchased this week will come with a free seat of AIM Online Training (including one certification attempt) as we celebrate the release of the latest AIM yesterday. arsenalrecon.com #DFIR
Do you have a #DFIR workstation running Windows on Arm? If you don’t now, you may soon after checking out Arsenal Image Mounter’s new Arm on Arm virtualization. While waiting on the Snapdragon X2 Elite, we're using a Dell XPS 13 (X Elite) with 64gb RAM. arsenalrecon.com
October 27, 2025 at 7:41 PM
Do you have a #DFIR workstation running Windows on Arm? If you don’t now, you may soon after checking out Arsenal Image Mounter’s new Arm on Arm virtualization. While waiting on the Snapdragon X2 Elite, we're using a Dell XPS 13 (X Elite) with 64gb RAM. arsenalrecon.com
Arsenal Image Mounter's new Arm on Arm virtualization is powerful, unique, & a big deal for #DFIR practitioners. If you have Windows on Arm computers (or disk images) in your evidence room, time to get them out! What do you see in these screenshots? arsenalrecon.com #DFIR
October 27, 2025 at 5:56 PM
Arsenal Image Mounter's new Arm on Arm virtualization is powerful, unique, & a big deal for #DFIR practitioners. If you have Windows on Arm computers (or disk images) in your evidence room, time to get them out! What do you see in these screenshots? arsenalrecon.com #DFIR
Arsenal Image Mounter v3.12.331 just released w/ Arm on Arm virtualization, Windows S Mode bypass (x64 & Arm!), multiple simultaneous disk connections w/ AIM Remote Agent, BitLocker support extended to Windows File System Driver Bypass Mode, & more. arsenalrecon.com #DFIR
October 27, 2025 at 3:55 PM
Arsenal Image Mounter v3.12.331 just released w/ Arm on Arm virtualization, Windows S Mode bypass (x64 & Arm!), multiple simultaneous disk connections w/ AIM Remote Agent, BitLocker support extended to Windows File System Driver Bypass Mode, & more. arsenalrecon.com #DFIR
One of our favorite places to provide unique & in-person only digital forensics training is Microsoft. Beautiful classrooms, coffee bars always nearby, & a quick walk for Xbox R&R between classes. (Some computing history too!) #DFIR
October 13, 2025 at 1:27 PM
One of our favorite places to provide unique & in-person only digital forensics training is Microsoft. Beautiful classrooms, coffee bars always nearby, & a quick walk for Xbox R&R between classes. (Some computing history too!) #DFIR
We've been quiet on social media this summer... when this happens, we tend to be focused on adding unique & powerful functionality to our digital forensics tools & high-stakes casework. Can you identify one of our summer priorities for Arsenal Image Mounter from this image? #DFIR
July 22, 2025 at 3:03 PM
We've been quiet on social media this summer... when this happens, we tend to be focused on adding unique & powerful functionality to our digital forensics tools & high-stakes casework. Can you identify one of our summer priorities for Arsenal Image Mounter from this image? #DFIR
Fellow #DFIR practitioners - what do you see happening in this short video involving WinFE, AIM Remote Agent, & Arsenal Image Mounter? arsenalrecon.com
May 11, 2025 at 4:35 PM
Fellow #DFIR practitioners - what do you see happening in this short video involving WinFE, AIM Remote Agent, & Arsenal Image Mounter? arsenalrecon.com
How do you connect AIM Remote Agent over a network to Arsenal Image Mounter on your forensic workstation when automatic discovery does not work (perhaps due to network filtering)? It's very easy - just use an IP address. See us demonstrate in this short video. #DFIR
May 10, 2025 at 7:16 PM
How do you connect AIM Remote Agent over a network to Arsenal Image Mounter on your forensic workstation when automatic discovery does not work (perhaps due to network filtering)? It's very easy - just use an IP address. See us demonstrate in this short video. #DFIR
Did you know that after booting a computer w/ WinFE, you can use AIM Remote Agent to connect it over a network to Arsenal Image Mounter on your forensic workstation w/ the same functionality as if the remote disk was a disk image or local physical disk? E.g. mounting VSCs! #DFIR
May 9, 2025 at 1:05 PM
Did you know that after booting a computer w/ WinFE, you can use AIM Remote Agent to connect it over a network to Arsenal Image Mounter on your forensic workstation w/ the same functionality as if the remote disk was a disk image or local physical disk? E.g. mounting VSCs! #DFIR
Headed back to the office after a few days at the Wisconsin ICAC conference where we provided training to digital forensics practitioners doing incredibly important work. We also learned more about how ESD (Electronic Storage Detection) K-9s are used & saw them in action. #DFIR
May 8, 2025 at 6:45 PM
Headed back to the office after a few days at the Wisconsin ICAC conference where we provided training to digital forensics practitioners doing incredibly important work. We also learned more about how ESD (Electronic Storage Detection) K-9s are used & saw them in action. #DFIR
We're teaching & exhibiting at the Wisconsin ICAC (Internet Crimes Against Children) conference this week. Come see us & make a copy of our Password Sledgehammer database w/ >23 billion unique password hashes for use when launching virtual machines w/ Arsenal Image Mounter. #DFIR
May 4, 2025 at 2:22 PM
We're teaching & exhibiting at the Wisconsin ICAC (Internet Crimes Against Children) conference this week. Come see us & make a copy of our Password Sledgehammer database w/ >23 billion unique password hashes for use when launching virtual machines w/ Arsenal Image Mounter. #DFIR
Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. arsenalrecon.com/downloads #DFIR
April 25, 2025 at 5:13 PM
Arsenal Image Mounter v3.11.307 is now available with minor fixes & other improvements which include improved handling of corrupt Registry hives when launching virtual machines. See the change log for more information. arsenalrecon.com/downloads #DFIR
AIM has been providing this functionality for many years. Check out our testimonials to see what our users have said about AIM launching virtual machines when their other tools & methods have failed. arsenalrecon.com/testimonials #DFIR
April 25, 2025 at 1:20 PM
AIM has been providing this functionality for many years. Check out our testimonials to see what our users have said about AIM launching virtual machines when their other tools & methods have failed. arsenalrecon.com/testimonials #DFIR
AIM was designed to launch Windows into virtual machines no matter how complex or even broken Windows installations are - from “logical” images missing partitions, disk images obtained live with corrupt Registry hives, etc. We deal with blue screens so you don't have to. #DFIR
April 25, 2025 at 1:20 PM
AIM was designed to launch Windows into virtual machines no matter how complex or even broken Windows installations are - from “logical” images missing partitions, disk images obtained live with corrupt Registry hives, etc. We deal with blue screens so you don't have to. #DFIR