You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Digital Forensics
I am wanting to know what is the best way to get an md5sum of a hard
drive and what would be the best tool to copy a drive and confirm my
copy matches the md5sum value.
I have read that DD works good and I have also read that Ghost 2008
will do this using the -ir option, but some articles mention that
ghost may write something to the headers of the images. I have booted
into Helix and Knoppix and tried getting the md5sum of the current
hard disk in a laptop but after 2 hours gave up. What is the best way
to get the md5sum value live os or install linux on a hard drive and
use the hard drive you are inspecting in a usb bay or somthing? Any
help would be great!