Sparse aquisition t...
 
Notifications
Clear all

Sparse aquisition tools

pgd1983
(@pgd1983)
New Member

Hello,

I am new to forensics and I would search a tool which allow me to perform a sparse aquisition in a forensically manner.

Is there some tool out there or would I have to generate an aquisition-report and the Hashes for every file myself e.g. with HashMyFiles from Nirsoft or a for-loop + md5sum command in Linux?

Not sure if come up with my own method is the best way. Are there approved and known good tools out there?

Quote
Topic starter Posted : 25/06/2021 2:18 pm
cpt.hookdangles
(@cpt-hookdangles)
New Member

wait are you looking for a tool to hash a bunch of files? or asking for an imager that treats space with 0's as sparse?

ReplyQuote
Posted : 08/07/2021 2:49 pm
pgd1983
(@pgd1983)
New Member

@cpt-hookdangles 

I am searching a tool that would aquire a bunch of files, folders, etc.

FTK Imager does that but only in the prop. AD1 format. Binalyze Tactical is quite interesting to collect only artefacts and/or some folders.

Are there more tools like that out there?

ReplyQuote
Topic starter Posted : 09/07/2021 1:59 pm
Share: