Create an account Home  ·  Topics  ·  Downloads  ·  Your Account  ·  Submit News  ·  Top 10  
Modules
· Home
· Content
· FAQ
· Forensic Downloads
· Forensics Feedback
· Forums
· Members List
· Statistics
· Surveys
· Top 10
· Topics
· Training Reviews
· Web Links
· Your Account

Our Membership

Latest: Nein
New Today: 0
New Yesterday: 2
Overall: 29410

Computer Forensics
This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.

Recent Posts

 Hostile work enviornment
 Can anyone suggest me a topic under printers forensics
 Unallocated clustered as court evidence
 Encryption
 I know how to recover ost file 2016

Computer Forensics World Forums


Pages Served
We received
52850396
page views since August 2004

Security Sources

FTC
OnGuard Online
ISO 17799 ISO 27001
ISO 27000 Toolkit
ISO 27001 & 27000
Cryptography
Security Policies

Computer Forensics World: Forums

Computer Forensics World :: View topic - How to take image of Win XP/7 using open source tools
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

How to take image of Win XP/7 using open source tools
Goto page Previous  1, 2
 
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Technical Issues
View previous topic :: View next topic  
Author Message
janeleonard
Newbie
Newbie


Joined: Oct 03, 2014
Posts: 5

PostPosted: Fri Oct 03, 2014 7:24 pm    Post subject: Reply with quote

"dd" forensic tool could be the best choice to go with.
Back to top
View user's profile Visit poster's website
cybercop
Newbie
Newbie


Joined: Nov 01, 2005
Posts: 551
Location: Marion, Indiana, USA

PostPosted: Fri Oct 10, 2014 6:15 am    Post subject: Reply with quote

DD is not a "forensics tool". DD is a simply a tool to copy data. While it is used frequently to create a bit level image of a drive, that doesn't make it a "forensics tool".
Back to top
View user's profile
mikenummerzoveel
Newbie
Newbie


Joined: Nov 30, 2011
Posts: 4

PostPosted: Fri Apr 24, 2015 9:48 pm    Post subject: FTK Imager + DEFT Reply with quote

I you work with a live system then use FTK Imager (lite) from a USB-drive.

If the system is off I always use DEFT Linux or the new DEFT-lite from a USB-drive to start the system I'm investigating. This Linux distro doesn't mount the system-drive(s) RW so it's forensically sound.

When the system is started with Deft you can use the Linux imaging tool GuyMager to image the HDD('s) or if you have to be in contact with your inner-nerd use DD from the terminal Very Happy

You can find DEFT here: http :// www . deftlinux . net/

Moderator Note: Direct links are not allowed.
Back to top
View user's profile
Display posts from previous:   
Post new topic   Reply to topic    Computer Forensics World Forum Index -> Technical Issues All times are GMT + 10 Hours
Goto page Previous  1, 2
Page 2 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Powered by phpBB 2.0.10 © 2001 phpBB Group
phpBB port v2.1 based on Tom Nitzschner's phpbb2.0.6 upgraded to phpBB 2.0.4 standalone was developed and tested by:
ArtificialIntel, ChatServ, mikem,
sixonetonoffun and Paul Laudanski (aka Zhen-Xjell).

Version 2.1 by Nuke Cops 2003 http://www.nukecops.com

Forums ©

 

TMs property of their respective owner. Comments property of posters. 2007 Computer Forensics Science World.
Digital forensic computing news syndication: Computer Forensics Training News or UM Text
Software is copyrighted phpnuke.org (c)2003, and is free under licence agreement. All Rights Are Reserved.