I just discovered a compromized server on my network at work, and I want to get the disk imaged so that I have a forensic copy around for further investigation, without having to keep the server isolated.
I'm pretty sure 'dd' is the utility I need to use, but I'm having
trouble finding the exact syntax for making a mirror of an existing
drive. Any help?
Thanks.
--
Matthew Walker
The Brain Garden, Inc
[EMAIL PROTECTED]
Work: (801) 655-1075
Home: (801) 491-2079
Page: (801) 283-9887 (Emergencies Only)
Random Quote:
It is impossible to travel faster than light, and certainly not desirable,
as one's hat keeps blowing off.
-- Woody Allen
signature.asc
Description: OpenPGP digital signature
.-----------------------------------. | This has been a P.L.U.G. mailing. | | Don't Fear the Penguin. | | IRC: #utah at irc.freenode.net | `-----------------------------------'
