.

Drive Imaging

<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Thu Aug 14, 2008 11:39 am

Drive Imaging

Does anyone have any recommendations for free/open-source drive imaging software?

I have come across Clonezilla and FOG.

I've yet to try out FOG, but Clonezilla is ridiculously unstable and doesn't seem to work properly.

Anyone have suggestions?

I'm going to try out FOG later today too, but figured I'd ask around to see what all everyone had to offer.

Thanks.

Bill
<<

oneeyedcarmen

User avatar

Full Member
Full Member

Posts: 233

Joined: Thu Jul 05, 2007 2:13 pm

Location: Baltimore, MD USA

Post Thu Aug 14, 2008 11:46 am

Re: Drive Imaging

I was for a long time using a product that I believe was called CloneEZ or EZClone.  However, when I consulted the great, wise oracle, I kept getting links for pot plant cloning products.  :o
Reluctant CISSP, Certified ASS
<<

oleDB

User avatar

Recruiters
Recruiters

Posts: 236

Joined: Thu Jul 20, 2006 8:58 am

Location: HOA

Post Thu Aug 14, 2008 12:38 pm

Re: Drive Imaging

If FOG disappoints, you might consider just trolling the dealdump sites for awhile. This year I saw a Symantec bundle with Ghost for like 29.99. Yeah it sucks to pay, but your getting a reliable product.
<<

jimbob

Post Thu Aug 14, 2008 1:30 pm

Re: Drive Imaging

BillV wrote:Does anyone have any recommendations for free/open-source drive imaging software?

Depends what your requirements are and what platform your using. There are simple command line tools like dd (and varients like ddrescue and dcfldd), forensic duplication tools like FTK imager, the ever popular Norton Ghost and many more.

Let me know what you need and I can make a suggestion.

Jimbob
<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Thu Aug 14, 2008 1:35 pm

Re: Drive Imaging

I just tried out the Trinity Rescue Kit which actually has some really neat features that I'm going to need to explore a little more. It seemed pretty stable, but it doesn't do local disk-to-disk backups (that I could find). It does, however, have an option for disk-to-disk over the network and requires 2 CDs and a different boot option in the receiving system. I'm going to try that out when I get a chance.

For now I'm still looking for something that will clone to a drive I have connected via USB. My next try is going to be with PING.

Jimbob, specifically I'm looking for something that has the ability to clone a drive (completely.. programs, registry, etc). I would like to be able to plug-in an external drive (or drive-to-usb device) and be able to clone the local drive. Then obviously have the ability to boot this new clone. Exactly what Clonezilla says it does, but something that works ;)
<<

jimbob

Post Thu Aug 14, 2008 1:41 pm

Re: Drive Imaging

Try FTK Imager. It's part of the Forensic Tool Kit suite, and while it's not open source it is free as in beer.

http://www.accessdata.com/downloads.html

Cheers,
Jimbob
<<

oleDB

User avatar

Recruiters
Recruiters

Posts: 236

Joined: Thu Jul 20, 2006 8:58 am

Location: HOA

Post Thu Aug 14, 2008 2:15 pm

Re: Drive Imaging

If you go the dd or dcfldd route, check the free tool from cert/cc for booting a dd image

http://liveview.sourceforge.net/
<<

Ketchup

User avatar

Hero Member
Hero Member

Posts: 1021

Joined: Fri Jul 04, 2008 7:44 pm

Location: Philadelphia, PA

Post Fri Aug 15, 2008 3:52 pm

Re: Drive Imaging

Working in forensics, I can tell you that there are few things out there faster then dd/dcfldd.  FTK Imager is a great tool (although windows only) that also support compression.  Linen is another tool from Guidance Software.  Again, it's slower then dd.  There are tons of front ends to dd, including Adelpto and Air.  We use a Helix boot cd for imaging with dd.
~~~~~~~~~~~~~~
Ketchup
<<

blackazarro

User avatar

Sr. Member
Sr. Member

Posts: 368

Joined: Sun Aug 13, 2006 5:31 pm

Post Tue Aug 19, 2008 11:15 pm

Re: Drive Imaging

In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.

We also use what oleDB mentioned, liveview for booting the image.

All these tools are free so that's why we use it. Our budget is limited.
Security+, OSCP, CEH
<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Wed Aug 20, 2008 7:06 am

Re: Drive Imaging

blackazarro wrote:In our forensic lab at work we use the dcfldd tool form the Helix live cd for imaging an entire drive. Using dcfldd works fine for cloning a drive to an external USB hard drive.


Is there a switch to show "time remaining"? I thought I saw this somewhere, but by default with no switches it just shows data copied.

That's pretty much the route I've chosen to go after testing with dd once already. Unfortunately, I am unable to even boot my laptop with any Live CD so I will have to figure something else out (probably open up my desktop and connect both drives via SATA then boot up that computer with a Live CD).

Thanks for all of the replies. I think I've downloaded and played with everything recommended, but it looks like something simple like dd is going to do the trick. The only other thing I've yet to try is Acronis.

BillV

Return to Other

Who is online

Users browsing this forum: No registered users and 2 guests

cron
.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software