Home page logo
/

basics logo Security Basics mailing list archives

Re: BitStream Copy Utility
From: "Brian Johnson" <brian.l.johnson () gmail com>
Date: Tue, 5 Feb 2008 16:55:32 -0600

No it does not, RoboCopy is a file copy, it will not pull slack and
unallocated space.

Full disk imaging is your best option.  DD is a common tool for this,
dcfldd is nice because it will hash the disk which you want to do
anyways.  There is some good stuff with libewf for acquiring images
also that will acquire them in the Expert Witness Format which was
developed by Guidance Software for Encase.

On Feb 4, 2008 11:39 PM, Michael Condon <mjc001 () juno com> wrote:
Does RoboCopy frmo the NT Resource Kit performa a BitStream copy?

Michael Condon

----- Original Message -----
From: "Murda Mcloud" <murdamcloud () bigpond com>
To: "'Michael Condon'" <mjc001 () juno com>;
<security-basics () securityfocus com>
Sent: Monday, February 04, 2008 9:52 PM
Subject: RE: BitStream Copy Utility


Hi Michael, I imagine that this question is related to the other question
you posted. As Ansgar said, you can use dd-which is on many good linux
distros.
You can also get dd for windows if you are windows based.
http://www.chrysocome.net/dd

You can use netcat to achieve this copy using a network cable-or as you
asked in the other post, use a usb cable and some of the tools from helix.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On
Behalf Of Michael Condon
Sent: Saturday, February 02, 2008 11:39 AM
To: security-basics () securityfocus com
Subject: BitStream Copy Utility

Can anyone suggest a freeware/shareware BitStream Copy Utility?






  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault