8 bits: View the contents of a DD image while it's being made

October 21, 2009

View the contents of a DD image while it's being made

I'm acquiring an old hard drive. The hard drive is not recognized in Windows. So, the only option for me is to make the image with Linux. At the moment I'm making a DD image, using this command:

dd if=/dev/sdc1 of=/home/my_name/my_dir/partition.image bs=4096 conv=notrunc,noerror

To my surprise, I can open and view the contents of the DD image with FTK Imager, while the DD image is being made and certainly not ready yet. No error warnings at all, in the background the DD process keeps goin' on and the image get's bigger and bigger.

I think this is quiet cool, maybe this trick can be usefull in very urgent cases, what do you think ?

Oct 21, 2009 8:33:20 AM | Forensics, FTK Imager

The comments to this entry are closed.

About base64 The new release of UltraEdit offers the possibility to encode / decode files with base46. I want to know more about it. I found nice information in this file from Chris Melnick (2004). Base64 is a different way of interpreting...

Synchronize files and folders I was looking for a free Windows tool to synchronize files and folders between two locations on my network. I have tried Microsoft SyncToy 2.1. Both 32 and 64 bits versions are available. The GUI is easy to understand. But,...