Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 36 guests and 2 members online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow Drive Imaging
EH-Net
May 21, 2013, 12:13:09 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Drive Imaging  (Read 7785 times)
0 Members and 1 Guest are viewing this topic.
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« on: August 14, 2008, 11:39:38 AM »

Does anyone have any recommendations for free/open-source drive imaging software?

I have come across Clonezilla and FOG.

I've yet to try out FOG, but Clonezilla is ridiculously unstable and doesn't seem to work properly.

Anyone have suggestions?

I'm going to try out FOG later today too, but figured I'd ask around to see what all everyone had to offer.

Thanks.

Bill
Logged
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 233


Klaatu, Borada,Necktie?


View Profile
« Reply #1 on: August 14, 2008, 11:46:14 AM »

I was for a long time using a product that I believe was called CloneEZ or EZClone.  However, when I consulted the great, wise oracle, I kept getting links for pot plant cloning products.  Shocked
Logged

Reluctant CISSP, Certified ASS
oleDB
Recruiters
Full Member
*
Offline Offline

Posts: 236



View Profile WWW
« Reply #2 on: August 14, 2008, 12:38:38 PM »

If FOG disappoints, you might consider just trolling the dealdump sites for awhile. This year I saw a Symantec bundle with Ghost for like 29.99. Yeah it sucks to pay, but your getting a reliable product.
Logged
jimbob
Guest
« Reply #3 on: August 14, 2008, 01:30:29 PM »

Does anyone have any recommendations for free/open-source drive imaging software?
Depends what your requirements are and what platform your using. There are simple command line tools like dd (and varients like ddrescue and dcfldd), forensic duplication tools like FTK imager, the ever popular Norton Ghost and many more.

Let me know what you need and I can make a suggestion.

Jimbob
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #4 on: August 14, 2008, 01:35:21 PM »

I just tried out the Trinity Rescue Kit which actually has some really neat features that I'm going to need to explore a little more. It seemed pretty stable, but it doesn't do local disk-to-disk backups (that I could find). It does, however, have an option for disk-to-disk over the network and requires 2 CDs and a different boot option in the receiving system. I'm going to try that out when I get a chance.

For now I'm still looking for something that will clone to a drive I have connected via USB. My next try is going to be with PING.

Jimbob, specifically I'm looking for something that has the ability to clone a drive (completely.. programs, registry, etc). I would like to be able to plug-in an external drive (or drive-to-usb device) and be able to clone the local drive. Then obviously have the ability to boot this new clone. Exactly what Clonezilla says it does, but something that works Wink
Logged
jimbob
Guest
« Reply #5 on: August 14, 2008, 01:41:49 PM »

Try FTK Imager. It's part of the Forensic Tool Kit suite, and while it's not open source it is free as in beer.

http://www.accessdata.com/downloads.html

Cheers,
Jimbob
Logged
oleDB
Recruiters
Full Member
*
Offline Offline

Posts: 236



View Profile WWW
« Reply #6 on: August 14, 2008, 02:15:59 PM »

If you go the dd or dcfldd route, check the free tool from cert/cc for booting a dd image

http://liveview.sourceforge.net/
Logged
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #7 on: August 15, 2008, 03:52:19 PM »

Working in forensics, I can tell you that there are few things out there faster then dd/dcfldd.   FTK Imager is a great tool (although windows only) that also support compression.   Linen is another tool from Guidance Software.   Again, it's slower then dd.   There are tons of front ends to dd, including Adelpto and Air.   We use a Helix boot cd for imaging with dd.
Logged

~~~~~~~~~~~~~~
Ketchup
nebu10uz
Sr. Member
****
Offline Offline

Posts: 368



View Profile WWW
« Reply #8 on: August 19, 2008, 11:15:08 PM »

In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.

We also use what oleDB mentioned, liveview for booting the image.

All these tools are free so that's why we use it. Our budget is limited.
Logged

Security+, OSCP, CEH
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #9 on: August 20, 2008, 07:06:43 AM »

In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.

Is there a switch to show "time remaining"? I thought I saw this somewhere, but by default with no switches it just shows data copied.

That's pretty much the route I've chosen to go after testing with dd once already. Unfortunately, I am unable to even boot my laptop with any Live CD so I will have to figure something else out (probably open up my desktop and connect both drives via SATA then boot up that computer with a Live CD).

Thanks for all of the replies. I think I've downloaded and played with everything recommended, but it looks like something simple like dd is going to do the trick. The only other thing I've yet to try is Acronis.

BillV
Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.067 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.