Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Feature Invoke-ForensicDD #162

Open
m4dm4n opened this issue Oct 29, 2020 · 0 comments
Open

Add Feature Invoke-ForensicDD #162

m4dm4n opened this issue Oct 29, 2020 · 0 comments

Comments

@m4dm4n
Copy link

m4dm4n commented Oct 29, 2020

Hi,

Although it has a name DD in it, it's missing one usefull feature, and that's writing to DISK/VOLUME from some file. That way we could use it for backing up GPT Headers and tables, and then restoring it.

Another thing, parameter "-Offset" should really be renamed to "-Skip" (or use it as a completely new parameter), and counted in blocks ( based on size of the block).
Let's have a medium sized 4TB disk, and we want to backup very last sector ( Backup GPTHeader). That's a large number, and mistakes could be made counting in bytes. Also, since disks are block based, we really should be thinking in blocks, not bytes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant