Forensi dupe
Printer Friendly Format
Bookmark this page
Back to "Kriminalistik"In the IT-Forensik marks a forensisches dupe 1:1 bit by bit - copy of a digital data medium. Here by the employment by special hardware and software it is guaranteed that the dupe is an identical copy of the original. All determination work should be accomplished only at this dupe.
On UNIX systems, and concomitantly on many diagnosis CDs (see Knoppix STD or HELIX) for this purpose the program of dd and/or dd-rescue (breaks with read errors not off) is used. However only actually visible ranges of the non removable disk can be copied. Faded out ranges, which were replaced due to errors by intact ranges, cannot be accessed with these programs. For this purpose only a modified firmware of the non removable disk or a direct selection of the plates with special devices remains.
Back to topArticles in category "Forensi dupe"
We found here 6 articles.
F» Fine coding» Firing trace » First attack » Forensi dupe » Forensi Entomologie » Free rider (Kriminalistik) |
Index | Privacy | Terms Of Use | Sitemap | Feedback
