LCL 17 – imaging and verification tools: dd, dc3dd, md5sum – Linux Command Line tutorial forensics
3.2K views on YouTube
Linux Command Line tutorial for forensics – 17 – imaging and verification tools: dd, dc3dd, md5sum
♥️ SUBSCRIBE for more videos: https://www.youtube.com/bluemonkey4n6?sub_confirmation=1
DISCLAIMER: This video is for instructional purposes only. If you follow along and try out the commands on your own and destroy any of your data, it’s on you. Do not try this on anything but a practice system with drives and data you are willing to lose.
This course was designed to provide information on how to use the command line environment in a Unix/Linux system to accomplish tasks such as imaging, data acquisition, and archiving. This course covers the basics of Unix/Linux commands that allow users to view and edit text files, obtain hardware and system information, partitioning and formatting, process related commands, manipulating disks and partitions, imaging, archiving, logical acquisition, live system response, and basic networking.
This would be beneficial for folks who are interested in digital forensics, incidence response, system administration, ethical hacking, or just plain linux. This course covers material for beginners as well as for advanced users. This course would also be helpful if you are considering taking the CompTIA Linux+ certification test.
Difficulty Level: Beginner
Prerequisites: Basic understanding of Linux command line. Basic conceptual understanding of forensic imaging.
Linux command line tutorial from the top: https://www.youtube.com/watch?v=QWSnc2-AI1A
In this video we will look at how to use the tool dc3dd to wipe, clone, and image media devices. We will also look at the md5sum command to obtain md5 hashes of files. Lastly we will look at the split command to break up large image files into smaller files.
Video timeline
00:00 intro
01:59 dc3dd – wiping a device
03:05 dc3dd – cloning a device
05:43 dc3dd – verifying a clone
07:54 dc3dd – imaging a device to raw format
11:44 md5sum – verifying the MD5 of a raw image
12:42 split – breaking large image into smaller files
16:18 recap
⭕️ For other videos about the Linux command line, see other videos in this series: https://www.youtube.com/playlist?list=PLSbhiuoC0XgX70ZtgJ7d-1rLui0jZRabg
Linux distro:
CAINE linux (https://www.caine-live.net). Using CAINE v12 beta
Virtualization software:
Virtual Box (http://virtualbox.org)
Icons made by freepik from @flaticon http://www.flaticon.com/authors/freepik
Icons made by Smashicons from http://www.flaticon.com/authors/smashicons