HomeSupport Home
Start TicketStart Ticket
View TicketView Ticket
Sales QuotesInfo Request
Info RequestInfo Request
Video TrainingFree Video Training
DownloadsFree Video Training
FAQFAQ
Contact UsContact Us

FREQUENTLY ASKED QUESTIONS FOR P2 EXPLORER

For registration questions, please visit the Registration FAQ page.

Q: What disk image formats are supported by P2 eXplorer Pro/Free?
A: Paraben's P2 eXplorer supports the following formats of disk images:
  • Paraben's Forensic Replicator disk images.
  • Paraben's Forensic storage containers created by P2 Enterprise Edition and P2 Commander.
  • Encase 4-5-6 disk images (.E01).
  • Safeback 2-3 disk images (Images 450 MB will not be mounted correctly).
  • RAW disk images from Linux DD and other tools.
  • Dynamic drive images.
  • FTK Encase, FTK DD and FTK SMART images
  • VMWare static and dynamic disk images and vmWare snapshots (P2 eXplorer Pro only).
  • VirtualPC static and dynamic disk images and VirtualPC snapshots (P2 eXplorer Pro only).
Q: What are the main differences between the Pro/Free editions of P2 eXplorer?
A: Paraben’s P2 eXplorer Pro gives you all the features of P2 eXplorer Free in addition to the following key features:
  • Windows 64 bit support (x64 and x86 versions)
  • Mounts vmWare static and dynamic disk images
  • Mounts vmWare static and dynamic snapshots
  • Mounts VirtualPC static and dynamic disk images
  • Mounts VirtualPC static and dynamic snapshots
Q: Can P2 eXplorer Pro/Free calculate MD5 hashsums of disk images both before and after processing?
A: Yes, P2 eXplorer’s MD5 calculation ability allows you to confirm that mounting has not changed your disk image. The MD5 calculation of the image is checked both before mounting and after it has been unmounted. After that, these two values are compared and the results of the comparison are shown in a message box.

To enable MD5 calculation, check the Calculate MD5 option in the View menu or in the right-click menu.

To disable MD5 calculation, uncheck the Calculate MD5 option in the View menu or in the right-click menu.

Q: How do you unmount a disk image after an examination with P2 eXplorer?
A: To umount a mounted disk image:
  1. Select the mount point to which the image is mounted. Please note, there must be a Plugin value present in the Source Type column.
  2. Select File-Unmount or click on the Unmount button or right-click and select Unmount.
  3. The image is unmounted. The mount point to which it was mounted now represents a Free value in the Source Type column.
To umount all mounted disk images:
  1. Select File-Unmount All or click on the Unmount All button or right-click and select Unmount All.
  2. All images are unmounted. The mount points to which they were mounted now represents a Free value in the Source Type column.
Q: How do I enable mounted disks to auto-run through Windows Autoplay?
A: If the Autorun option is enabled, after an image is mounted, the Autorun operation for the disk will be started. Please note, some images don't support this feature.

To enable a mounted disk to autorun, check the Enable Autorun option in the View menu or in the right-click menu and re-login to Windows.

To disable a mounted disk to autorun, uncheck the Enable Autorun option in the View menu or in the right-click menu and re-login to Windows.

Q: Do we have a tool that can search a drive specifically for certain file types without having to acquire the full drive first?
A: Yes, Deployable P2 Commander provides a user with that capability.

Q: What can you do with P2 eXplorer Pro that you can't do with the free version?
A: The Pro version has 64 bit support and it can mount vmWare and VirtualPC for static and dynamic disk images and snapshots.
Lost Password