maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Translated ['src/generic-methodologies-and-resources/basic-forensic-meth

Browse Source
This commit is contained in:
Translator 2025-08-19 16:58:33 +00:00
parent 894b4e656b
commit 252b1407ed
1 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/generic-methodologies-and-resources/basic-forensic-methodology/image-acquisition-and-mount.md
View File

@ -16,7 +16,7 @@ sha256sum disk.img > disk.img.sha256
```
### dc3dd / dcfldd
`dc3dd` je aktivno održavana verzija dcfldd (DoD Computer Forensics Lab dd).
`dc3dd` je aktivno održavana verzija dcfldd (DoD laboratorija za forenziku računara dd).
```bash
# Create an image and calculate multiple hashes at acquisition time
sudo dc3dd if=/dev/sdc of=/forensics/pc.img hash=sha256,sha1 hashlog=/forensics/pc.hashes log=/forensics/pc.log bs=1M
@ -58,12 +58,7 @@ sudo ewfacquire /dev/sdb -u evidence -c 1 -d "Seizure 2025-07-22" -e 1 -X examin
aws ec2 create-snapshot --volume-id vol-01234567 --description "IR-case-1234 web-server 2025-07-22"
# Copy the snapshot to S3 and download with aws cli / aws snowball
```
*Azure* – koristite `az snapshot create` i izvezite na SAS URL. Pogledajte stranicu iz HackTricks:
{{#ref}}
../../cloud/azure/azure-forensics.md
{{#endref}}
*Azure* – koristite `az snapshot create` i izvezite na SAS URL.
## Montiranje