Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Forensic Downloads
· Forensics Feedback
· Forums
· Recommend Us
· Statistics
· Surveys
· Top 10
· Topics
· Training Reviews
· Web Links
· Your Account

Our Membership

Latest: BIGDOG33544
New Today: 3
New Yesterday: 10
Overall: 20871

Computer Forensics
This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.

Recent Posts

 Iowa Laws
 I want to get training and Education
 U.S. law enforcement computer forensics career
 Working on Bachelors now, hoping to move into this field
 I'm really interested in Computer Forensics.Wat should I do?

Computer Forensics World Forums


Pages Served
We received
14260714
page views since August 2004

Security Sources

Firewalls
Cryptography
ISO 17799 ISO 27001
ISO 17799 Toolkit
ISO 27001 & 27000
Disk Analysis
Security Policies

Computer Forensics World: Forums

Computer Forensics World :: View topic - Standalone drive cloning software
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Standalone drive cloning software

 
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Forensic Software and Tools
View previous topic :: View next topic  
Author Message
chickencow
Newbie
Newbie


Joined: Nov 09, 2009
Posts: 1

PostPosted: Tue Nov 10, 2009 11:35 am    Post subject: Standalone drive cloning software Reply with quote

Hi everyone. Very interesting place here. I have no involvement with computer forensics; I found CFW through web searches for an app that I can use to clone my HDDs. My search was surprisingly fruitless, but it looks like this is the right crowd for my question.

To date, I've been using Acronis software, which I realize does not actually clone drives (ie. it is not a bit-for-bit copy). This has been fine, but I recently encrypted my drives and this has closed the door on just about every app I can find.

I've read several threads here, and from what I've seen I can say that I don't necessarily need forensic-quality cloning, in the sense that I don't care about hashes or the like. My needs are not forensic -- I just need to be able to create backups of my drives.

The trick of course is that the entire drive is encrypted -- everything but the boot record, obviously -- so I really do need something that will just go out and copy everything it finds. No "helpful" software that tries to analyze what it finds, no compression, etc. Just find a byte, copy a byte, lather, rinse, repeat.

I've followed links from here to FTK software and a few others, and while they look like they would indeed do the job, they're way too expensive for my personal needs (no doubt in part because they also include tons of other features that I don't need).

I run WinXP, but what I really need is a bootable solution that operates independently of the OS. Considering that the OS itself is encrypted, this is actually a necessity. I'm an old-school CP/M / DOS guy, been fiddling with this stuff for 25 odd years, so I'm not at all afraid of Linux or command-line based stuff. I just need something that will work. And I'm certainly not opposed to commercial software (i.e. costs money), just not to the tune of $3,500. Razz

(Freeware / open-source is certainly preferred, of course ...)

Any advice for this situation?
Back to top
View user's profile
PreferredUser
Newbie
Newbie


Joined: Jan 01, 2007
Posts: 651
Location: Midwest, USA

PostPosted: Tue Nov 10, 2009 2:07 pm    Post subject: Reply with quote

dd or any of the variants will make a bit-by-bit copy. Helix, Cain, etc. all include some variant(s) of dd and are bootable.
Back to top
View user's profile
ilikemycomputer
Newbie
Newbie


Joined: Oct 03, 2007
Posts: 41
Location: On the forum

PostPosted: Tue Nov 10, 2009 11:27 pm    Post subject: Reply with quote

You may also be able to use the 'partimage' command on a Linux distro. This command saves a given partition onto an .img file and you have the option to compress it with gzip or bzip2. You can also set it to break the image file into smaller files, so they can be burned to cds or dvds. You can also use the command to restore an image file.

http : //www . partimage . org/

-ilikemycomputer
Back to top
View user's profile Visit poster's website
xaberx
Newbie
Newbie


Joined: Apr 15, 2008
Posts: 15

PostPosted: Tue Nov 17, 2009 10:14 am    Post subject: Image Reply with quote

PreferredUser wrote:
dd or any of the variants will make a bit-by-bit copy. Helix, Cain, etc. all include some variant(s) of dd and are bootable.


I agree with PreferredUser, DD will likely be the best bet in your case. I would recommend burning a copy of BartPE with dd on board to provide a way to image it back and forth. DD's command is rather easy to use as well:

Code:

' copy from drive1 to drive2 byte by byte
dd if=\\.\PhysicalDrive0 of=\\.\PhysicalDrive1
'copy from drive 1 to image file
dd if=\\.\PhysicalDrive0 of="D:\drive1.img"
Back to top
View user's profile
Blackegg
Newbie
Newbie


Joined: Jul 08, 2009
Posts: 10

PostPosted: Thu Feb 04, 2010 3:23 am    Post subject: Hardcopy II Reply with quote

Hardcopy II by VOOM Technologies is an excellent stand alone, bit by bit HDD copy hardware. We own one and it is great. It does more than just copy/clone as well.
Blackegg...
_________________
A+
Net+
BDRA
Back to top
View user's profile Visit poster's website
PreferredUser
Newbie
Newbie


Joined: Jan 01, 2007
Posts: 651
Location: Midwest, USA

PostPosted: Thu Feb 04, 2010 8:29 am    Post subject: Re: Hardcopy II Reply with quote

Blackegg wrote:
Hardcopy II by VOOM Technologies is an excellent stand alone, bit by bit HDD copy hardware. We own one and it is great. It does more than just copy/clone as well.
Blackegg...
Certainly one of many excellent hardware based drive cloning devices, but at over $1K, and based on the OP writing, "(Freeware / open-source is certainly preferred, of course ...)" it may be more than is budgeted.
Back to top
View user's profile
novatech
Newbie
Newbie


Joined: Jun 09, 2010
Posts: 1

PostPosted: Thu Jun 10, 2010 12:44 am    Post subject: dd cloning Reply with quote

I realise this is an old post, but the following link should provide useful info for anyone else have the same requirement:

http : // forums . truecrypt.org/viewtopic.php?t=20353

Rgds
Novatech
Back to top
View user's profile
obnray29
Newbie
Newbie


Joined: Jul 16, 2010
Posts: 2

PostPosted: Sat Jul 17, 2010 8:57 am    Post subject: Question Reply with quote

Is anyone using these other bit-by-bit copy programs in the field and having it admissable in court?
Back to top
View user's profile
cybercop
Newbie
Newbie


Joined: Nov 01, 2005
Posts: 292
Location: Marion, Indiana, USA

PostPosted: Sat Jul 17, 2010 10:02 pm    Post subject: Reply with quote

As long as the hash of the copy is the same as the hash from the original, the method used to copy it doesn't matter. All that does matter is that it is an EXACT copy.
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Forensic Software and Tools All times are GMT + 10 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.10 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops © 2003 http://www.nukecops.com

Forums ©

 

TMs property of their respective owner. Comments property of posters. © 2007 Computer Forensics Science World.
Digital forensic computing news syndication: Computer Forensics Training News or UM Text
Software is copyrighted phpnuke.org (c)2003, and is free under licence agreement. All Rights Are Reserved.