Backtrack 4 R2 Digital Forensics DCFLDD

In this video I use the dcfldd application to copy a partition of one hard drive to an image file on another hard drive in Backtrack 4 R2. This program was created by the DOD Computer Forensics Lab as tool for data acquisitions. One thing to note, be sure you set the "if and "of" correctly as if they are reversed you will wipe your drive. I also make a md5 hash of the original file and of the copied file to verify the accuracy of the copied image. This application can be ran from the terminal, however the tool is located by clicking the Start Menu--Backtrack--Digital Forensics--Image Acquiring--DCFLDD. For more information visit http://lecturesnippets.com

Видео Backtrack 4 R2 Digital Forensics DCFLDD канала lecture snippets