Re: raw disk access
yes you can :)
On Sun, Jan 12, 2003 at 07:50:38PM +0100, Joshua SS Miller wrote:
> Just a thought, but could one just use cat? I know that you can write
> disk image to a floppy with cat, so why should one not be able to cat
> /dev/hda1 > imagefile
>
> Any ideas?
>
> Thank you,
>
> Joshua SS Miller
>
> On Mon, 2003-01-13 at 03:19, Jean-Francois Dive wrote:
> > already answered but dd | nc (to send it to another box) is a classical.
> >
> > Otherwise, some other tools can give you as well memory dumps which may
> > sometimes be very usefull.
> >
> > JeF
> >
> > On Tue, Jan 07, 2003 at 10:08:22PM -0500, viv wrote:
> > > Hi.
> > >
> > > As a Debian user, i am posting to this list first in the hopes
> > > that what i am looking for can be found as a Debian package.
> > >
> > > i am looking for forensics tools that can be used in computer
> > > crime investigations, and am particularly interesting in a tool
> > > that provides raw drive (hard, floppy, CD, DVD, etc.) access in
> > > order to create complete and accurate drive images.
> > >
> > > If such a tool does not exist within Debian, is anyone aware of
> > > any application (GPLed, please) that does? Failing that, i am
> > > willing to write my own tool, if necessary, and would appreciate
> > > any pointers to good reference material (raw drive access and
> > > how to work with the images created).
> > >
> > > If it helps, i am running with the latest 'unstable' packages.
> > >
> > > Many thanks.
> > >
> > > --
> > > viv <viv@veeev.com>
> >
> >
> >
> > --
> >
> > -> Jean-Francois Dive
> > --> jef@linuxbe.org
> >
> > There is no such thing as randomness. Only order of infinite
> > complexity. - _The Holographic Universe_, Michael Talbot
> >
>
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
--
-> Jean-Francois Dive
--> jef@linuxbe.org
There is no such thing as randomness. Only order of infinite
complexity. - _The Holographic Universe_, Michael Talbot
Reply to: