Title: 8. Using Other Forensics-Acquisition Tools
Course: IN 2005 Digital Forensics > Section: Module 4: Chapter 4 - Data Acquisition

Using Other Forensics-Acquisition Tools

1. This section describes the following acquisition tools:
  - SnapBack DatArrest
  - SafeBack
  - DIBS USA RAID
  - ILook Investigator IXimager
  - Vogon International SDi32
  - ASRData SMART
  - Australian Department of Defence PyFlag

NTI SafeBack

1. NTI SafeBack is a reliable MS-DOS tool, small enough to fit on a forensic boot floppy that performs an SHA-256 calculation per sector copied.
2. The functions performed by NTI SafeBack, including:
  - Disk-to-image copy (image can be on tape)
  - Disk-to-disk copy (adjusts target geometry), parallel port laplink can be used
  - Copies a partition to an image file
  - Compresses acquire information

DIBS USA RAID

1. Rapid Action Imaging Device (RAID) is a portable computer system designed to make disk-to-disk images.  Copied disks can then be attached to a write-blocker device.

ASRData SMART

1. The main capabilities of ASRData SMART, including:
  - Robust data reading of bad sectors on drives
  - Mounting suspect drives in write-protected mode
  - Mounting target drives in read/write mode
  - Optional compression schemes