Hello,
I am new to forensics and I would search a tool which allow me to perform a sparse aquisition in a forensically manner.
Is there some tool out there or would I have to generate an aquisition-report and the Hashes for every file myself e.g. with HashMyFiles from Nirsoft or a for-loop + md5sum command in Linux?
Not sure if come up with my own method is the best way. Are there approved and known good tools out there?
wait are you looking for a tool to hash a bunch of files? or asking for an imager that treats space with 0's as sparse?
I am searching a tool that would aquire a bunch of files, folders, etc.
FTK Imager does that but only in the prop. AD1 format. Binalyze Tactical is quite interesting to collect only artefacts and/or some folders.
Are there more tools like that out there?
