ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.

Difference between revisions of "AIR"

From ForensicsWiki
Jump to: navigation, search
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
AIR (Automated Image and Restore) is a GUI front-end to dd/dcfldd designed for easily creating forensic bit images.
+
{{Infobox_Software |
 +
  name = AIR |
 +
  maintainer = [[Steve Gibson]]
 +
Modding [[Nanni Bassetti]]|
 +
  os = {{Cross-platform}} |
 +
  genre = {{Disk imaging}} |
 +
  license = {{GPL}} |
 +
  website = [http://air-imager.sourceforge.net/ air-imager.sourceforge.net] |
 +
}}
 +
 
 +
The '''Automated Image and Restore''' or '''AIR''' is a GUI front-end to [[dd]] and [[dc3dd]] designed for easily creating forensic bit images.
  
 
Features:
 
Features:
Line 12: Line 22:
 
# detailed logging with date/times and complete command-line used
 
# detailed logging with date/times and complete command-line used
  
Website: http://air-imager.sourceforge.net/
+
== External Links ==
 +
 
 +
* [http://air-imager.sourceforge.net/ Official website]

Latest revision as of 18:10, 28 March 2010

AIR
Maintainer: Steve Gibson

Modding Nanni Bassetti

OS: Cross-platform
Genre: Disk imaging
License: GPL
Website: air-imager.sourceforge.net

The Automated Image and Restore or AIR is a GUI front-end to dd and dc3dd designed for easily creating forensic bit images.

Features:

  1. auto-detection of IDE and SCSI drives, CD-ROMs, and tape drives
  2. choice of using either dd or dcfldd
  3. image verification between source and copy via MD5 or SHA1/256/384/512
  4. image compression/decompression via gzip/bzip2
  5. image over a TCP/IP network via netcat/cryptcat
  6. supports SCSI tape drives
  7. wiping (zeroing) drives or partitions
  8. splitting images into multiple segments
  9. detailed logging with date/times and complete command-line used

External Links