Re: BitStream Copy Utility

["Brian Johnson" <brian.l.johnson () gmail com>]

No it does not, RoboCopy is a file copy, it will not pull slack and
unallocated space.

Full disk imaging is your best option.  DD is a common tool for this,
dcfldd is nice because it will hash the disk which you want to do
anyways.  There is some good stuff with libewf for acquiring images
also that will acquire them in the Expert Witness Format which was
developed by Guidance Software for Encase.

On Feb 4, 2008 11:39 PM, Michael Condon <mjc001 () juno com> wrote:
> Does RoboCopy frmo the NT Resource Kit performa a BitStream copy?
>
> Michael Condon
>
> ----- Original Message -----
> From: "Murda Mcloud" <murdamcloud () bigpond com>
> To: "'Michael Condon'" <mjc001 () juno com>;
> <security-basics () securityfocus com>
> Sent: Monday, February 04, 2008 9:52 PM
> Subject: RE: BitStream Copy Utility
>
>
> > Hi Michael, I imagine that this question is related to the other question
> > you posted. As Ansgar said, you can use dd-which is on many good linux
> > distros.
> > You can also get dd for windows if you are windows based.
> > http://www.chrysocome.net/dd
> >
> > You can use netcat to achieve this copy using a network cable-or as you
> > asked in the other post, use a usb cable and some of the tools from helix.
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On
> > Behalf Of Michael Condon
> > Sent: Saturday, February 02, 2008 11:39 AM
> > To: security-basics () securityfocus com
> > Subject: BitStream Copy Utility
> >
> > Can anyone suggest a freeware/shareware BitStream Copy Utility?