Notifications
Clear all
Topic starter
28/11/2007 8:24 pm
I think I've tried every possible command with a windows port of dd to image a folder and it doesn't work.
dd.exe if=\\.\E\evidence of=\\.\F\image.dd conv=noerror –localwrt
\\.\E\evidence Access is denied.
Unable to copy file!
Access is denied.
I'm trying to image a folder and obtain not just the files, but unallocated space as well. Is this even possible?
28/11/2007 10:22 pm
Unallocated space isn't associated with a folder or volume…it's unallocated.
28/11/2007 11:06 pm
> Is this possible?<
No. It makes no sense at all, at least for NTFS. If you want unallocated space you are going to have to "image" the entire logical volume.
Topic starter
28/11/2007 11:42 pm
Thanks for setting me straight.