Re: [sleuthkit-users] Question about Hash

[Paul T. <bin...@gm...>]

Anderson,

If you use the dcfldd tool you can hash the stream as is is being
gathered and output the hash to a file using the 'hashlog=[FILE]'
option.

otherwise 'md5sum /dev/sda' is quite valid.

Paul Tew

On Fri, 2011-04-15 at 10:18 -0300, Anderson Clayton wrote:
> Hi guys,
>  
> I am new in computer forensics, but i have a dumb question.
> I hope you guys could help me
> I want to verify the integrity of my image, so i want to compare the
> hashes of my source disk and the copy i made with DD.
> my question is: how can I obtain hash sums of my source disk?
> I have to mount some live-CD and calculate with MD5 or SHA1?
>  
> How is the command line that i can obtain the hash of my source
> disk???
> The command line is: md5sum /dev/sda ???
>  
> I know its a dumb question, but i would thank if you guys could help
> me
>  
> Thanks
> Anderson
> 
> ------------------------------------------------------------------------------
> Benefiting from Server Virtualization: Beyond Initial Workload 
> Consolidation -- Increasing the use of server virtualization is a top
> priority.Virtualization can reduce costs, simplify management, and improve 
> application availability and disaster protection. Learn more about boosting 
> the value of server virtualization. http://p.sf.net/sfu/vmware-sfdev2dev
> _______________________________________________ sleuthkit-users mailing list https://lists.sourceforge.net/lists/listinfo/sleuthkit-users http://www.sleuthkit.org