How to convert a Windows SFS (Dynamic Disks) partition to regular partition for forensic analysis

Yes, the answer is 42! 🙂 During analysis of a compromised Windows virtual machine, recently I’ve faced with a VmWare disk containing a SFS partition (id 42): # fdisk -l DISK1-flat.vmdk Disk DISK1-flat.vmdk: 200 GiB, 214748364800 bytes, 419430400 sectors Units: sectors of 1 * 512 = 512 bytes Sector size (logical/physical): 512 bytes / 512...