Forensic (but not only) graphical frontend to work with binary images (RAW) of media in GNU/Linux. These images are universal and can be installed using both standard operating systems and popular forensic software such as Encase, Sleuthkit/Autopsy, etc. in all operating systems).
The idea of the project is to implement a fast, convenient and safe making of legal copies and manipulating with images, by means of GNU/Linux, without the need for expensive hardware write lock on the media, it is necessary in the existing solutions under Windows. Also the program can be used as a last chance to rescue data from a dying media by software.
- The interface is designed in such a way as to minimize the possibility of data loss when used as a result of user's error or hardware failure. In this case the program is transparent to those who used to work manually on the command line.
- Copy the contents of the hard disk image file by means of a popular tool dd_rescue, which allows to obtain a copy of even heavily damaged media.
- Automatic resume after the break up, for example, in case of loss of a disk or hardware failure. This further increases the chance to make a copy of the damaged disk in case of degradation during the second reading, or just save time.
- Calculation MD5 and SHA-1 checksum of the image captured.
- Ability to deploy the image file on a physical medium. This allows the drive to return the modified data to its original state, run the OS from the image file on a physical PC, completely transfer the data to other media, etc.
- Easy to mount and unmount partitions with data of image file.
- The program can be easily integrated into the Live CD.
- Available build for qt and gtk both.
no trouble to install and run, works nicely.