AIR

From Forensics Wiki
Revision as of 19:54, 22 January 2007 by Alisou (Talk | contribs)

Jump to: navigation, search

AIR (Automated Image and Restore) is a GUI front-end to dd/dcfldd designed for easily creating forensic bit images.

Features:

  1. auto-detection of IDE and SCSI drives, CD-ROMs, and tape drives
  2. choice of using either dd or dcfldd
  3. image verification between source and copy via MD5 or SHA1/256/384/512
  4. image compression/decompression via gzip/bzip2
  5. image over a TCP/IP network via netcat/cryptcat
  6. supports SCSI tape drives
  7. wiping (zeroing) drives or partitions
  8. splitting images into multiple segments
  9. detailed logging with date/times and complete command-line used

Website: http://air-imager.sourceforge.net/