Sparse aquisition t...
Clear all

Sparse aquisition tools

3 Posts
2 Users
Posts: 13
Active Member
Topic starter


I am new to forensics and I would search a tool which allow me to perform a sparse aquisition in a forensically manner.

Is there some tool out there or would I have to generate an aquisition-report and the Hashes for every file myself e.g. with HashMyFiles from Nirsoft or a for-loop + md5sum command in Linux?

Not sure if come up with my own method is the best way. Are there approved and known good tools out there?

Posted : 25/06/2021 2:18 pm
Posts: 10
Active Member

wait are you looking for a tool to hash a bunch of files? or asking for an imager that treats space with 0's as sparse?

Posted : 08/07/2021 2:49 pm
Posts: 13
Active Member
Topic starter


I am searching a tool that would aquire a bunch of files, folders, etc.

FTK Imager does that but only in the prop. AD1 format. Binalyze Tactical is quite interesting to collect only artefacts and/or some folders.

Are there more tools like that out there?

Posted : 09/07/2021 1:59 pm