Disk Copy and MD5sum

26 views
Skip to first unread message

Kernel.Dead

unread,
Mar 13, 2008, 5:17:30 PM3/13/08
to Digital Forensics
I am wanting to know what is the best way to get an md5sum of a hard
drive and what would be the best tool to copy a drive and confirm my
copy matches the md5sum value.

I have read that DD works good and I have also read that Ghost 2008
will do this using the -ir option, but some articles mention that
ghost may write something to the headers of the images. I have booted
into Helix and Knoppix and tried getting the md5sum of the current
hard disk in a laptop but after 2 hours gave up. What is the best way
to get the md5sum value live os or install linux on a hard drive and
use the hard drive you are inspecting in a usb bay or somthing? Any
help would be great!

Thanks,
Reply all
Reply to author
Forward
0 new messages