Here's a Handy Tool for Disk Imaging

Wayne Davis waydavis at cox.net
Mon Apr 9 00:16:01 MST 2007


In the event of a catastrophic drive failure, Will this recover a system 
WITHOUT re-installing the OS first?  I didnot see a mechanism for doing 
that.

  Arconis uses a boot cd that enables USB, network shares and uses image 
files Ive created on a 80 gig USB drive formatted  NTFS as well as other 
images on shared NTFS drives.


Erich Newell wrote:
> I just popped in and have seen a ton of comments regarding proper 
> imaging of a hard drive, and thought I'd throw in my two cents.
>
> One of my favorite tools is dcfldd ( 
> http://www.forensicswiki.org/wiki/Dcfldd and 
> http://www.sourceforge.net/projects/dcfldd/). It is a forensic version 
> of dd, that can be used over a network. It essentially does the same 
> things that many have been describing, but in a much cleaner interface.
>
> A snippet from the wiki:
>
> -------- snip -------
>
> *dcfldd* is an enhanced version of dd 
> <http://www.forensicswiki.org/wiki/Dd>. It has some useful features 
> for forensic investigators 
> <http://www.forensicswiki.org/index.php?title=Investigator&action=edit>:
>
>     * On-the-fly hashing <http://www.forensicswiki.org/wiki/Hash> of
>       the transmitted data.
>     * Progress bar of how much data has already been sent.
>     * Wiping of disks with known patterns.
>     * Verification that the image is identical to the original drive,
>       bit-for-bit.
>     * Simultaneous output to more than one file/disk is possible.
>     * The output can be splitted into multiple files.
>     * Logs and data can be piped into external applications.
>
> The program only produces raw image files 
> <http://www.forensicswiki.org/wiki/Raw_image_file>.
>
> -------- end snip -------
>
> I thought some may find this useful.
>
> -- 
> "A man is defined by the questions that he asks; and the way he goes 
> about finding the answers to those questions is the way he goes 
> through life."
> ------------------------------------------------------------------------
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



More information about the PLUG-discuss mailing list