Sparse aquisition t...
 
Notifications
Clear all

Sparse aquisition tools

3 Posts
2 Users
0 Likes
1,613 Views
(@pgd1983)
Posts: 13
Active Member
Topic starter
 

Hello,

I am new to forensics and I would search a tool which allow me to perform a sparse aquisition in a forensically manner.

Is there some tool out there or would I have to generate an aquisition-report and the Hashes for every file myself e.g. with HashMyFiles from Nirsoft or a for-loop + md5sum command in Linux?

Not sure if come up with my own method is the best way. Are there approved and known good tools out there?

 
Posted : 25/06/2021 1:18 pm
(@cpt-hookdangles)
Posts: 10
Active Member
 

wait are you looking for a tool to hash a bunch of files? or asking for an imager that treats space with 0's as sparse?

 
Posted : 08/07/2021 1:49 pm
(@pgd1983)
Posts: 13
Active Member
Topic starter
 

@cpt-hookdangles 

I am searching a tool that would aquire a bunch of files, folders, etc.

FTK Imager does that but only in the prop. AD1 format. Binalyze Tactical is quite interesting to collect only artefacts and/or some folders.

Are there more tools like that out there?

 
Posted : 09/07/2021 12:59 pm
Share: