Neuer Studiengang im Wintersemester 2010/2011:

          "Unternehmens- und IT-Sicherheit"

Forensic Live CD  ::  MI-4n6
Prof. Dr. Daniel Hammer

Imaging
Imaging


badblocks data storage medium check
badblock-guess fast copying of readable blocks
bcwipe secure deletion
dccidd create bitaccurate images including md5 hashes
dcfldd forensic version of dd
dd create bitaccurate copies
dd_rescue create bitaccurate copies for data rescue
disktype recognizes formats of several storage media
fusermount mount Encase-Images, NTFS, etc.
fsgrab reads selected sectors from filesystems, etc.
fwipe secure deletion
myrescue data rescue from defect storage media
raw create RAW-Images
sdd create bitaccurate images, optimized for tapes
setmax set the number of maximal sectors to a self defined value
testdisk recognize and retrieves partitions
wipe secure deletion