Re: Forensic help?

[Christophe Garault <letoff () gmail com>]

Red Leg wrote:

> I was wondering if anyone knows of a program/system that I can purchase, as
> a private individual, that will allow me to
>
> 1) mirror a hard drive on location and
>
> 2) take that mirror and restore it to another drive. And
>
> 3) Find any CONVENTIONALLY erased files?

Why not give a try to g4l (Ghost for Linux)?

http://freshmeat.net/projects/g4l/

--
Christophe Garault

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/