Skip to content

Add Feature Invoke-ForensicDD #162

@m4dm4n

Description

@m4dm4n

Hi,

Although it has a name DD in it, it's missing one usefull feature, and that's writing to DISK/VOLUME from some file. That way we could use it for backing up GPT Headers and tables, and then restoring it.

Another thing, parameter "-Offset" should really be renamed to "-Skip" (or use it as a completely new parameter), and counted in blocks ( based on size of the block).
Let's have a medium sized 4TB disk, and we want to backup very last sector ( Backup GPTHeader). That's a large number, and mistakes could be made counting in bytes. Also, since disks are block based, we really should be thinking in blocks, not bytes.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions