Hi ALL,
Looking to evaluate/test few live imaging tools that will mange to image HDD's using pre-boot USB sticks
I am looking for something that will image encrypted HDD's (Entire disk) on powered off laptops without the need to remove disk.
I used so far MACQUISITION or KALI LINUX USB
Do you have any other commercial tools in mind I could test?
I believe OS Forensics will allows you to do what you looking to do as well if you make it a self bootable drive (Windows PE).
I would still disconnect the drives to confirm BIOS Startup.
I have used Live DEFT on stick. Mixed success with certain SSD adapters.
Pretty clear on announcing if a connect device needs to be ReadOnly mounted or RW mounted.
CAINE is another go to LIVE STICK. Automatically defaults to RO mounting on boot. You have to switch the mounting properties TO RW before making Target drive connections.
https://
I use Sumuri Paladin. You can purchase their USB stick or make your own for free by following their blog post.