4
votes
Accepted
Imaging free space only
There is Access Data FTK Imager Lite which is a ~5 year old free version of their commercial product.
I never exported unallocated space before, but it seems to work:
Add a logical drive as an ...
3
votes
Accepted
Free computer forensic software for Windows
TestDisk should be your candidate:
collect data / capture disk images: Yes (I don't know of a size limit)
open dd-style files: Yes (that's what I used if for often; it analyzes the structure and, ...
Izzy♦
- 18.7k
1
vote
1
vote
Hash comparison tool or script
I was dealing with this issue today as well. It turns out that the standard *sum utilities in Linux take care of this with their -c option for checking with a filename argument. Here's an example of ...
1
vote
Need software to recover a NTFS partition from drive with corrupted partition table
main and backup partition tables were then re-written so the partitions were 'lost', however the partitons were not overwritten
Then it is a super easy job for TestDisk. The tool has to be run on the ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
forensics × 18windows × 10
gratis × 3
linux × 2
security × 2
data-recovery × 2
malware × 2
windows-registry × 2
open-source × 1
email × 1
windows-10 × 1
networking × 1
offline × 1
command-line × 1
monitoring × 1
macos × 1
email-client × 1
hard-disk × 1
usb × 1
optical-media × 1
comparison × 1
file-format × 1
log-analysis × 1
bash × 1
memory-management × 1