Re: raw disk access
Is the `dd` command what you are looking for (in combination with
/dev/loop?), or is there some requirement that wasn't mentioned in
your message?
viv <viv@veeev.com> writes:
> i am looking for forensics tools that can be used in computer
> crime investigations, and am particularly interesting in a tool
> that provides raw drive (hard, floppy, CD, DVD, etc.) access in
> order to create complete and accurate drive images.
>
> If such a tool does not exist within Debian, is anyone aware of
> any application (GPLed, please) that does? Failing that, i am
> willing to write my own tool, if necessary, and would appreciate
> any pointers to good reference material (raw drive access and
> how to work with the images created).
--
/* Dale Southard Jr. dsouth@llnl.gov 925-422-1463 fax 422-9429 */
/* Computer Scientist, Advanced Simulation and Computing Program */
/* L-073, Lawrence Livermore National Lab, Livermore CA 94551 */
Reply to: