Description
Storage media can be imaged with a dd-like forensic tool that calculates hashes during acquisition. This is useful for investigators and administrators who need evidence-friendly disk copies.
Forensic copy tools can destroy data if source and destination are confused. Confirm devices, hash settings, logs, and write protection before imaging any real drive.