Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 22 guests online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow Drive Imaging
Ethical Hacker Community Forums
December 05, 2008, 04:24:43 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Drive Imaging  (Read 2945 times)
0 Members and 1 Guest are viewing this topic.
BillV
Hero Member
*****
Offline Offline

Posts: 870


View Profile
« on: August 14, 2008, 11:39:38 AM »

Does anyone have any recommendations for free/open-source drive imaging software?

I have come across Clonezilla and FOG.

I've yet to try out FOG, but Clonezilla is ridiculously unstable and doesn't seem to work properly.

Anyone have suggestions?

I'm going to try out FOG later today too, but figured I'd ask around to see what all everyone had to offer.

Thanks.

Bill
Logged
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 205

Klaatu, Borada,Necktie?


View Profile
« Reply #1 on: August 14, 2008, 11:46:14 AM »

I was for a long time using a product that I believe was called CloneEZ or EZClone.  However, when I consulted the great, wise oracle, I kept getting links for pot plant cloning products.  Shocked
Logged

MCP, Security+, Associate (ISC)2
oleDB
Full Member
***
Offline Offline

Posts: 231



View Profile WWW
« Reply #2 on: August 14, 2008, 12:38:38 PM »

If FOG disappoints, you might consider just trolling the dealdump sites for awhile. This year I saw a Symantec bundle with Ghost for like 29.99. Yeah it sucks to pay, but your getting a reliable product.
Logged
jimbob
Sr. Member
****
Offline Offline

Posts: 318



View Profile WWW
« Reply #3 on: August 14, 2008, 01:30:29 PM »

Does anyone have any recommendations for free/open-source drive imaging software?
Depends what your requirements are and what platform your using. There are simple command line tools like dd (and varients like ddrescue and dcfldd), forensic duplication tools like FTK imager, the ever popular Norton Ghost and many more.

Let me know what you need and I can make a suggestion.

Jimbob
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 870


View Profile
« Reply #4 on: August 14, 2008, 01:35:21 PM »

I just tried out the Trinity Rescue Kit which actually has some really neat features that I'm going to need to explore a little more. It seemed pretty stable, but it doesn't do local disk-to-disk backups (that I could find). It does, however, have an option for disk-to-disk over the network and requires 2 CDs and a different boot option in the receiving system. I'm going to try that out when I get a chance.

For now I'm still looking for something that will clone to a drive I have connected via USB. My next try is going to be with PING.

Jimbob, specifically I'm looking for something that has the ability to clone a drive (completely.. programs, registry, etc). I would like to be able to plug-in an external drive (or drive-to-usb device) and be able to clone the local drive. Then obviously have the ability to boot this new clone. Exactly what Clonezilla says it does, but something that works Wink
Logged
jimbob
Sr. Member
****
Offline Offline

Posts: 318



View Profile WWW
« Reply #5 on: August 14, 2008, 01:41:49 PM »

Try FTK Imager. It's part of the Forensic Tool Kit suite, and while it's not open source it is free as in beer.

http://www.accessdata.com/downloads.html

Cheers,
Jimbob
Logged
oleDB
Full Member
***
Offline Offline

Posts: 231



View Profile WWW
« Reply #6 on: August 14, 2008, 02:15:59 PM »

If you go the dd or dcfldd route, check the free tool from cert/cc for booting a dd image

http://liveview.sourceforge.net/
Logged
Ketchup
Newbie
*
Offline Offline

Posts: 46


View Profile
« Reply #7 on: August 15, 2008, 03:52:19 PM »

Working in forensics, I can tell you that there are few things out there faster then dd/dcfldd.   FTK Imager is a great tool (although windows only) that also support compression.   Linen is another tool from Guidance Software.   Again, it's slower then dd.   There are tons of front ends to dd, including Adelpto and Air.   We use a Helix boot cd for imaging with dd.
Logged
blackazarro
Full Member
***
Offline Offline

Posts: 228



View Profile
« Reply #8 on: August 19, 2008, 11:15:08 PM »

In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.

We also use what oleDB mentioned, liveview for booting the image.

All these tools are free so that's why we use it. Our budget is limited.
Logged

Security+, OSCP, CEH
BillV
Hero Member
*****
Offline Offline

Posts: 870


View Profile
« Reply #9 on: August 20, 2008, 07:06:43 AM »

In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.

Is there a switch to show "time remaining"? I thought I saw this somewhere, but by default with no switches it just shows data copied.

That's pretty much the route I've chosen to go after testing with dd once already. Unfortunately, I am unable to even boot my laptop with any Live CD so I will have to figure something else out (probably open up my desktop and connect both drives via SATA then boot up that computer with a Live CD).

Thanks for all of the replies. I think I've downloaded and played with everything recommended, but it looks like something simple like dd is going to do the trick. The only other thing I've yet to try is Acronis.

BillV
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.058 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.