Join Jungwoo Ryoo for an in-depth discussion in this video Creating split-disk image files with DD, part of Learning Computer Forensics.
…There is also a way to split your image file into multiple files.…This is sometimes necessary because you have to put it on a media like CD,…which has only very limited capacities.…To do that, we use the same command, DD.…And then, input file source which is the physical USB drive.…So, that was dev sdd.…Now, instead of saying OF or…output file here, we will be using something called a filter.…
And, the role of a filter in Unix, or Linux, is that,…it will be taking the output of the previous command, and then,…pass that output, as an input, to the next command.…So, whatever is coming out of the d d input file command,…the output of that will go to the next command.…So, in this case it will be the image file.…But, we'll be splitting it into multiple files.…So, the command is split.…The block size has to be 650 megabyte, that's the size we want.…
So, that's why we type 650 M.…And then, we need the hyphen, we need a space after that, and…then type the name of the image file which is USB image.…And then, dot for the extension so…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.