Hi guys,

I need a free forensic sector by sector copy software... I wait yor advices.
Thank you very much.  

dcfldd

dcfldd.sourceforge.net/

Also, SANS SIFT Workstation has many free tools, including imaging tools.  

- Bulldawg

dcfldd

dcfldd.sourceforge.net/

Also, SANS SIFT Workstation has many free tools, including imaging tools.

Thank you very much, you know windows based any software?  

FTK imager, but I don't think FTK imager creates a sector-by-sector copy of the device the same way dcfldd does. FTK imager can create image files (which are better anyway, but doesn't address your question.)

SANS SIFT can also be run in VMWare Player, so it will also work with Windows.  

When you say "sector by sector" are you meaning to say "bit for bit"?

This is the term usually associated with a forensic "whole disc" image.

FTK imager is the probably the best windows based software and it can do DD and E01 format images, as well as a couple others you are never likely to use or need.

Beyond that you are going to need other software to read that image once you've acquired it. What is the end goal here?  

See here:
www.911cd.net/forums//...opic=16534
and links within.
dsfok package
dd for windows
all the dd-like tools listed here:
reboot.pro/topic/15207...for-ddexe/
and datarescue dd:
www.datarescue.com/pho...3/drdd.htm
are all sector by sector (or byte by byte or bit by bit)

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

Personally, I copy data QWORD by QWORD.