Difference between revisions of "Disk Imaging"

From ForensicsWiki
Jump to: navigation, search
(Created page with "{{expand}} == External Links == === Hash based === * [http://www.dfrws.org/2010/proceedings/2010-314.pdf Hash based disk imaging using AFF4], by Michael Cohen, [[Bradley...")
 
Line 1: Line 1:
 
{{expand}}
 
{{expand}}
 +
 +
Disk imaging is the process of making a bit-by-bit copy of a disk. Imaging (in more general terms) can apply to anything that can be considered as a bit-stream, e.g. a physical or logical volumes, network streams, etc.
 +
 +
The disk image is stored in a [[:Category:Forensics_File_Formats|Forensics image format]]
 +
 +
== Also see ==
 +
[[:Category:Forensics_File_Formats|Forensics File Formats]]
  
 
== External Links ==
 
== External Links ==
 +
* [http://www.tableau.com/pdf/en/Tableau_Forensic_Disk_Perf.pdf Benchmarking Hard Disk Duplication Performance in Forensic Applications], by Robert Botchek
  
=== Hash based ===
+
=== Hash based imaging ===
 
* [http://www.dfrws.org/2010/proceedings/2010-314.pdf Hash based disk imaging using AFF4], by [[Michael Cohen]], [[Bradley Schatz]]
 
* [http://www.dfrws.org/2010/proceedings/2010-314.pdf Hash based disk imaging using AFF4], by [[Michael Cohen]], [[Bradley Schatz]]

Revision as of 06:07, 21 July 2012

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Disk imaging is the process of making a bit-by-bit copy of a disk. Imaging (in more general terms) can apply to anything that can be considered as a bit-stream, e.g. a physical or logical volumes, network streams, etc.

The disk image is stored in a Forensics image format

Also see

Forensics File Formats

External Links

Hash based imaging