This is one of the tools you need to have in your toolkit.
Do you currently handle cases involving a computer? If so, what do you use to create a backup of the computer?
Does it provide a way to verify the backup and PROVE that it has not been modified?
Or do you WANT to start taking cases that involve a computer, and yet you do not know what to use?
THEN THIS IS THE TOOL FOR YOU!
Look how easy it is to use:
Put the disc into the computer you want to backup
Plug in the External USB drive ($55 from Walmart)
Follow the FOUR steps and your DONE!
This tool does NOT touch the hard drive at all, it will NOT modify the hard drive at all!
BUT CHECK THIS OUT!!
This tool, will also create an MD5 Checksum of the backup file! What does this mean? This means, if you have to prove to anyone, lawyer, spouse, court, that the backup has not been modified, even by ONE BYTE, you can!
An MD5 is an encrypted checksum signature that is created in order to allow you to verify the integrity of a file. Since it is encrypted, if just one byte is changed, the MD5 checksum will fail.
BACKUP FILE FORMAT
Now, lets talk about the backup that is made. The backup is done in a DD format. DD is a LONG accepted format in the Unix/Linux world. and creates an IMAGE of the computer.
IMAGE vs COPY
What is the difference between a IMAGE and a COPY? Well, an IMAGE of a computer contains EVERYTHING, every file, every email, every website, every deleted item, slack space, EVERYTHING! What about a copy? A copy will only get the files that are active, or can be seen. A copy will NOT get deleted files, slack space, temp space, etc. In other words, you will miss out on important evidence!
But what do you do now?
Well, now that you have a DD image of the computer, you can use any Computer Forensic Tool to exam the computer! You can use tools such as: Encase, Helix (my favorite!), FTK, etc. Plus, you can mount the DD image and browse it just like you were sitting at that computer!
Order your copy of the Investigators Backup Tool from the company that started the Internet Revolution with Private Investigators!
PC or Macintosh, your choice!
I developed a copy of the Investigator Backup Tool to run on Windows based computer, and I also developed one that will run on Macintosh computers. With the Macintosh version, it runs from a USB stick.