Last updated
Forensic disk analyzer — decode images & live devices, map partitions, flag anomalies
$ winget install --id SecurityRonin.disk4n6 --exact --version 0.8.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
disk4n6 uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i disk4n6-0.8.3-x86_64-pc-windows-msvc.msi /quiet /norestart
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
disk4n6 decodes forensic disk images (E01, VMDK, VHDX, VHD, QCOW2, DMG, raw dd, ISO),
auto-detects MBR/GPT/APM partitioning, and routes ISO 9660 to filesystem analysis.
Run it with no arguments to enumerate the host's physical disks and partitions
across macOS, Linux, and Windows with a proportional partition-layout view and
acquisition-integrity findings.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x64 | MSI WiX | machine | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
No known CVEs for disk4n6.
Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.
More from SecurityRonin or browse cli, dfir, digital-forensics.