±Partners and Sponsors
±Your Account
Membership:
New Today: 1
New Yesterday: 4
Overall: 26234
Visitors: 55±Forensics Europe Expo
±Latest Articles
· Windows Forensics and Security
· Samsung Galaxy Android 4.3 Jelly Bean acquisition using Joint Test Action Group (JTAG)
· Safer Internet Day
· Webmail Forensics – Digging deeper into Browsers and Mobile Applications
· Operation Endeavour: The Tip of the Iceberg?
· Forensic analysis of the ESE database in Internet Explorer 10
· WhatsApp – discovering timestamps of deleted messages
· Man In The Middle Attack: Forensics
· Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases
· Windows 8 File History Analysis
· Samsung Galaxy Android 4.3 Jelly Bean acquisition using Joint Test Action Group (JTAG)
· Safer Internet Day
· Webmail Forensics – Digging deeper into Browsers and Mobile Applications
· Operation Endeavour: The Tip of the Iceberg?
· Forensic analysis of the ESE database in Internet Explorer 10
· WhatsApp – discovering timestamps of deleted messages
· Man In The Middle Attack: Forensics
· Extracting Evidence from Destroyed Skype Logs and Cleared SQLite Databases
· Windows 8 File History Analysis
±Follow Forensic Focus
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Thank you very much, you know windows based any software?
forensic sector by sector copy software
Go to page 1, 2 Next
forensic sector by sector copy software
Posted: Tue Feb 19, 2013 4:01 pm
Hi guys,
I need a free forensic sector by sector copy software... I wait yor advices.
Thank you very much.
I need a free forensic sector by sector copy software... I wait yor advices.
Thank you very much.
-
gehlen - Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 4:14 pm
dcfldd
dcfldd.sourceforge.net/
Also, SANS SIFT Workstation has many free tools, including imaging tools.
dcfldd.sourceforge.net/
Also, SANS SIFT Workstation has many free tools, including imaging tools.
-
Bulldawg - Senior Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 4:15 pm
- Bulldawgdcfldd
dcfldd.sourceforge.net/
Also, SANS SIFT Workstation has many free tools, including imaging tools.
Thank you very much, you know windows based any software?
-
gehlen - Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 4:59 pm
FTK imager, but I don't think FTK imager creates a sector-by-sector copy of the device the same way dcfldd does. FTK imager can create image files (which are better anyway, but doesn't address your question.)
SANS SIFT can also be run in VMWare Player, so it will also work with Windows.
SANS SIFT can also be run in VMWare Player, so it will also work with Windows.
-
Bulldawg - Senior Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 7:59 pm
When you say "sector by sector" are you meaning to say "bit for bit"?
This is the term usually associated with a forensic "whole disc" image.
FTK imager is the probably the best windows based software and it can do DD and E01 format images, as well as a couple others you are never likely to use or need.
Beyond that you are going to need other software to read that image once you've acquired it. What is the end goal here?
This is the term usually associated with a forensic "whole disc" image.
FTK imager is the probably the best windows based software and it can do DD and E01 format images, as well as a couple others you are never likely to use or need.
Beyond that you are going to need other software to read that image once you've acquired it. What is the end goal here?
-
Adam10541 - Senior Member
Re: forensic sector by sector copy software
Posted: Wed Feb 20, 2013 10:16 am
See here:
www.911cd.net/forums//...opic=16534
and links within.
dsfok package
dd for windows
all the dd-like tools listed here:
reboot.pro/topic/15207...for-ddexe/
and datarescue dd:
www.datarescue.com/pho...3/drdd.htm
are all sector by sector (or byte by byte or bit by bit)
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
www.911cd.net/forums//...opic=16534
and links within.
dsfok package
dd for windows
all the dd-like tools listed here:
reboot.pro/topic/15207...for-ddexe/
and datarescue dd:
www.datarescue.com/pho...3/drdd.htm
are all sector by sector (or byte by byte or bit by bit)
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member
Re: forensic sector by sector copy software
Posted: Fri Feb 22, 2013 3:49 am
Personally, I copy data QWORD by QWORD.
-
Chris_Ed - Senior Member