Difference between pages "Educational Resources for Teaching Computer Forensics" and "AIR"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m
 
 
Line 1: Line 1:
Other websites with forensic information:
+
{{Infobox_Software |
 +
  name = AIR |
 +
  maintainer = [[Steve Gibson]]
 +
Modding [[Nanni Bassetti]]|
 +
  os = {{Cross-platform}} |
 +
  genre = {{Disk imaging}} |
 +
  license = {{GPL}} |
 +
  website = [http://air-imager.sourceforge.net/ air-imager.sourceforge.net] |
 +
}}
  
e-evidence info:
+
The '''Automated Image and Restore''' or '''AIR''' is a GUI front-end to [[dd]] and [[dc3dd]] designed for easily creating forensic bit images.
* [http://www.e-evidence.info/projects.html Ongoing Forensic Projects]
+
 
 +
Features:
 +
# auto-detection of IDE and SCSI drives, CD-ROMs, and tape drives
 +
# choice of using either dd or dcfldd
 +
# image verification between source and copy via MD5 or SHA1/256/384/512
 +
# image compression/decompression via gzip/bzip2
 +
# image over a TCP/IP network via netcat/cryptcat
 +
# supports SCSI tape drives
 +
# wiping (zeroing) drives or partitions
 +
# splitting images into multiple segments
 +
# detailed logging with date/times and complete command-line used
 +
 
 +
== External Links ==
 +
 
 +
* [http://air-imager.sourceforge.net/ Official website]

Latest revision as of 13:10, 28 March 2010

AIR
Maintainer: Steve Gibson

Modding Nanni Bassetti

OS: Cross-platform
Genre: Disk imaging
License: GPL
Website: air-imager.sourceforge.net

The Automated Image and Restore or AIR is a GUI front-end to dd and dc3dd designed for easily creating forensic bit images.

Features:

  1. auto-detection of IDE and SCSI drives, CD-ROMs, and tape drives
  2. choice of using either dd or dcfldd
  3. image verification between source and copy via MD5 or SHA1/256/384/512
  4. image compression/decompression via gzip/bzip2
  5. image over a TCP/IP network via netcat/cryptcat
  6. supports SCSI tape drives
  7. wiping (zeroing) drives or partitions
  8. splitting images into multiple segments
  9. detailed logging with date/times and complete command-line used

External Links