Quote:
Originally posted by chort
You're not trying to MD5 the "device", you want the MD5 of the entire contents of the device, right?
|
Hi chort,
No, actually I want the device.
In linux, let's say you have a device attached, /dev/hda. You can issue the following command
And it will return an MD5 hash for the device.
Now, if you want to be sure you have a bit-image copy, you dd, then run the MD5 again on the dd'd file and be sure the two match.
That's what I'm trying to do.
Basically image a USB DRIVE in its entirety, and verify after I've imaged that I've actually got a forensically sound copy.
md5deep is a project by Jesse Kornblum that's a fairly neat little tool to recursivle do MD5 hashing. However, I want the device hashed at this stage, not the contents.
Am I being clear? if not, just ask!
Thanks
Niall.
P.S. I don't care if the hash is SHA, or CRC, or whatever, just so long as I can verify afterwards what it is I have done.