mailing list archives
Re: BitStream Copy Utility
From: "Brian Johnson" <brian.l.johnson () gmail com>
Date: Tue, 5 Feb 2008 16:55:32 -0600
No it does not, RoboCopy is a file copy, it will not pull slack and
Full disk imaging is your best option. DD is a common tool for this,
dcfldd is nice because it will hash the disk which you want to do
anyways. There is some good stuff with libewf for acquiring images
also that will acquire them in the Expert Witness Format which was
developed by Guidance Software for Encase.
On Feb 4, 2008 11:39 PM, Michael Condon <mjc001 () juno com> wrote:
Does RoboCopy frmo the NT Resource Kit performa a BitStream copy?
----- Original Message -----
From: "Murda Mcloud" <murdamcloud () bigpond com>
To: "'Michael Condon'" <mjc001 () juno com>;
<security-basics () securityfocus com>
Sent: Monday, February 04, 2008 9:52 PM
Subject: RE: BitStream Copy Utility
Hi Michael, I imagine that this question is related to the other question
you posted. As Ansgar said, you can use dd-which is on many good linux
You can also get dd for windows if you are windows based.
You can use netcat to achieve this copy using a network cable-or as you
asked in the other post, use a usb cable and some of the tools from helix.
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
Behalf Of Michael Condon
Sent: Saturday, February 02, 2008 11:39 AM
To: security-basics () securityfocus com
Subject: BitStream Copy Utility
Can anyone suggest a freeware/shareware BitStream Copy Utility?
RE: Law Enforcement Foresics Tools Mason, Samuel (Feb 05)
- RE: Law Enforcement Foresics Tools, (continued)