| 
  • If you are citizen of an European Union member nation, you may not use this service unless you are at least 16 years old.

  • You already know Dokkio is an AI-powered assistant to organize & manage your digital files & messages. Very soon, Dokkio will support Outlook as well as One Drive. Check it out today!

View
 

Linux dd

Page history last edited by Patrick 5 years, 2 months ago

Sample of Tools for Forensic Examination - Video 3 (20 minutes)

Linux dd

 

Lecture Overview:

 

  • How to image and verify a drive using Linux. Use dd to image a drive in Linux, obtain file information with file, and multiple methods to create and view hashes.:

 

    • Disable Automount - (1:40)
    • Image a drive - (5:40)
    • file command - (7:52)
    • Hash the image file - (8:37)
    • Create a MD5 of a device - (13:02)
    • Verify hash in FTK Imager - (15:45)
    • Verify has in ProDiscover - (16:26) 

 

Download:

 

 

Additional Supporting Material:

 

All Course Lectures  

 

 

Comments (0)

You don't have permission to comment on this page.