±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 6 Overall: 33968
New Yesterday: 6 Visitors: 192

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

USB Imaging Software

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

USB Imaging Software

Post Posted: Mon Jan 22, 2018 10:03 am

Hi ALL,

Looking to evaluate/test few live imaging tools that will mange to image HDD's using pre-boot USB sticks

I am looking for something that will image encrypted HDD's (Entire disk) on powered off laptops without the need to remove disk.

I used so far MACQUISITION or KALI LINUX USB

Do you have any other commercial tools in mind I could test?  

pajkow
Senior Member
 
 
  

Re: USB Imaging Software

Post Posted: Mon Jan 22, 2018 10:36 am

I believe OS Forensics will allows you to do what you looking to do as well if you make it a self bootable drive (Windows PE).  

Kenobyte
Newbie
 
 
  

Re: USB Imaging Software

Post Posted: Mon Jan 22, 2018 12:32 pm

I would still disconnect the drives to confirm BIOS Startup.

I have used Live DEFT on stick. Mixed success with certain SSD adapters.
Pretty clear on announcing if a connect device needs to be ReadOnly mounted or RW mounted.

CAINE is another go to LIVE STICK. Automatically defaults to RO mounting on boot. You have to switch the mounting properties TO RW before making Target drive connections.  

bntrotter
Senior Member
 
 
  

Re: USB Imaging Software

Post Posted: Mon Jan 22, 2018 1:40 pm


UnallocatedClusters
Senior Member
 
 
  

Re: USB Imaging Software

Post Posted: Fri Mar 09, 2018 1:07 pm

I use Sumuri Paladin. You can purchase their USB stick or make your own for free by following their blog post.  

surfandwork
Member
 
 

Page 1 of 1