±Forensic Focus Partners
±Your Account

![]() |
![]() |
![]() |
![]() |
±Latest Articles
±Latest Jobs
±Latest Webinars
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Thank you very much, you know windows based any software?
Back to top
Back to main
Back to content
forensic sector by sector copy software
Go to page 1, 2 Nextforensic sector by sector copy software
Posted: Tue Feb 19, 2013 9:01 pm
Hi guys,
I need a free forensic sector by sector copy software... I wait yor advices.
Thank you very much.
I need a free forensic sector by sector copy software... I wait yor advices.
Thank you very much.
-
gehlen - Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 9:14 pm
dcfldd
dcfldd.sourceforge.net/
Also, SANS SIFT Workstation has many free tools, including imaging tools.
dcfldd.sourceforge.net/
Also, SANS SIFT Workstation has many free tools, including imaging tools.
-
Bulldawg - Senior Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 9:15 pm
- Bulldawgdcfldd
dcfldd.sourceforge.net/
Also, SANS SIFT Workstation has many free tools, including imaging tools.
Thank you very much, you know windows based any software?
-
gehlen - Member
Re: forensic sector by sector copy software
Posted: Tue Feb 19, 2013 9:59 pm
FTK imager, but I don't think FTK imager creates a sector-by-sector copy of the device the same way dcfldd does. FTK imager can create image files (which are better anyway, but doesn't address your question.)
SANS SIFT can also be run in VMWare Player, so it will also work with Windows.
SANS SIFT can also be run in VMWare Player, so it will also work with Windows.
-
Bulldawg - Senior Member
Re: forensic sector by sector copy software
Posted: Wed Feb 20, 2013 12:59 am
When you say "sector by sector" are you meaning to say "bit for bit"?
This is the term usually associated with a forensic "whole disc" image.
FTK imager is the probably the best windows based software and it can do DD and E01 format images, as well as a couple others you are never likely to use or need.
Beyond that you are going to need other software to read that image once you've acquired it. What is the end goal here?
This is the term usually associated with a forensic "whole disc" image.
FTK imager is the probably the best windows based software and it can do DD and E01 format images, as well as a couple others you are never likely to use or need.
Beyond that you are going to need other software to read that image once you've acquired it. What is the end goal here?
-
Adam10541 - Senior Member
Re: forensic sector by sector copy software
Posted: Wed Feb 20, 2013 3:16 pm
See here:
www.911cd.net/forums//...opic=16534
and links within.
dsfok package
dd for windows
all the dd-like tools listed here:
reboot.pro/topic/15207...for-ddexe/
and datarescue dd:
www.datarescue.com/pho...3/drdd.htm
are all sector by sector (or byte by byte or bit by bit)
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
www.911cd.net/forums//...opic=16534
and links within.
dsfok package
dd for windows
all the dd-like tools listed here:
reboot.pro/topic/15207...for-ddexe/
and datarescue dd:
www.datarescue.com/pho...3/drdd.htm
are all sector by sector (or byte by byte or bit by bit)
jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. -
-
jaclaz - Senior Member
Re: forensic sector by sector copy software
Posted: Fri Feb 22, 2013 8:49 am
Personally, I copy data QWORD by QWORD.
-
Chris_Ed - Senior Member