±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 5
New Yesterday: 5
Overall: 27325
Visitors: 63

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

forensic sector by sector copy software

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

forensic sector by sector copy software

Post Posted: Tue Feb 19, 2013 4:01 pm

Hi guys,

I need a free forensic sector by sector copy software... I wait yor advices.
Thank you very much.  

gehlen
Member
 
 
  

Re: forensic sector by sector copy software

Post Posted: Tue Feb 19, 2013 4:14 pm

dcfldd

dcfldd.sourceforge.net/

Also, SANS SIFT Workstation has many free tools, including imaging tools.  

Bulldawg
Senior Member
 
 
  

Re: forensic sector by sector copy software

Post Posted: Tue Feb 19, 2013 4:15 pm

- Bulldawg
dcfldd

dcfldd.sourceforge.net/

Also, SANS SIFT Workstation has many free tools, including imaging tools.


Thank you very much, you know windows based any software?  

gehlen
Member
 
 
  

Re: forensic sector by sector copy software

Post Posted: Tue Feb 19, 2013 4:59 pm

FTK imager, but I don't think FTK imager creates a sector-by-sector copy of the device the same way dcfldd does. FTK imager can create image files (which are better anyway, but doesn't address your question.)

SANS SIFT can also be run in VMWare Player, so it will also work with Windows.  

Bulldawg
Senior Member
 
 
  

Re: forensic sector by sector copy software

Post Posted: Tue Feb 19, 2013 7:59 pm

When you say "sector by sector" are you meaning to say "bit for bit"?

This is the term usually associated with a forensic "whole disc" image.

FTK imager is the probably the best windows based software and it can do DD and E01 format images, as well as a couple others you are never likely to use or need.

Beyond that you are going to need other software to read that image once you've acquired it. What is the end goal here?  

Adam10541
Senior Member
 
 
  

Re: forensic sector by sector copy software

Post Posted: Wed Feb 20, 2013 10:16 am

See here:
www.911cd.net/forums//...opic=16534
and links within.
dsfok package
dd for windows
all the dd-like tools listed here:
reboot.pro/topic/15207...for-ddexe/
and datarescue dd:
www.datarescue.com/pho...3/drdd.htm
are all sector by sector (or byte by byte or bit by bit)

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: forensic sector by sector copy software

Post Posted: Fri Feb 22, 2013 3:49 am

Personally, I copy data QWORD by QWORD.  

Chris_Ed
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next