Disk Imaging?

Matthew Ross Walker matt at thebraingarden.com
Tue Sep 6 10:19:17 MDT 2005


I just discovered a compromized server on my network at work, and I want
to get the disk imaged so that I have a forensic copy around for further
investigation, without having to keep the server isolated.

I'm pretty sure 'dd' is the utility I need to use, but I'm having
trouble finding the exact syntax for making a mirror of an existing
drive. Any help?

Thanks.
-- 
Matthew Walker
The Brain Garden, Inc
matt at thebraingarden.com
Work: (801) 655-1075
Home: (801) 491-2079
Page: (801) 283-9887 (Emergencies Only)

Random Quote:
It is impossible to travel faster than light, and certainly not desirable,
as one's hat keeps blowing off.
		-- Woody Allen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
Url : http://plug.org/pipermail/plug/attachments/20050906/7de7ac59/attachment.bin 


More information about the PLUG mailing list