Raw disk copy?
-
Drill the lock out?
Everything makes sense in someone's mind
A "hardware solution". I love it!
-
I need to take a machine and do a raw disk image of it (unused sectors and all) for a forensic type investigation if necessary. The problem is, this machine has a locked case, and the key has been lost. It is bootable to a CD or the hard disk. I don't want to install something on the machine itself, in order to prevent tainting the disk. I need to find a way to do a raw disk image of this machine across the network to my server. I have googled and tried several things (Active@, Ultimate Boot CD for windows) but none have worked. Any suggestions out there? Thanks!
Write your own :) It can be written in an hour into assembly :) For windows download cs.exe from this list[^], start command prompt and execute cs.exe with following parameters (but don't copy this, it's only an example): cs.exe -i \\.\PHYSICALDRIVE0 -o "D:\harddiskcopy.bin" -b 0 -e 0 -s [SIZE_OF_HDD_IN_BYTES] -p 32768 For -i and -o values see this: Create File() function[^] and for the number check disk management in windows. -b is the offset in the file/device/volume specified by -i from where the copy reading process will begin (0 = begining) -e is the offset in the file/device/volume specified by -o from where the copy (OVER)WRITING will begin (0 = begining) -s is the size in bytes that would be copied -p is the number of bytes that will be copied (program reads -p [number] bytes into memory and then writes them to the destination and loops until -s [number] bytes reached) Hope that helps, but be careful, that can read and write to harddisk so you can erase the harddisk if you specified it in -o :)
-
I need to take a machine and do a raw disk image of it (unused sectors and all) for a forensic type investigation if necessary. The problem is, this machine has a locked case, and the key has been lost. It is bootable to a CD or the hard disk. I don't want to install something on the machine itself, in order to prevent tainting the disk. I need to find a way to do a raw disk image of this machine across the network to my server. I have googled and tried several things (Active@, Ultimate Boot CD for windows) but none have worked. Any suggestions out there? Thanks!
Try HDCLone