------------------------------------------------------------------------------------- / _ \ \_\(_)/_/ _//"\\_ JOHLEM.net / \ https://johlem.net/V1/topics/cheatsheet.php ------------------------------------------------------------------------------------- --- CHEATSHEET FORENSICS src: https://www.pearsonitcertification.com/articles/article.aspx?p=27203&seqNum=3 Create the MD5 checksom for the disk # md5sum /dev/fd0 > /tmp/original-md5 create an image file of the disk. # dd if=/dev/fd0 of=/tmp/disk.img bs=1k se MD5 to verify the accuracy of the image file. restore the image file to a blank disk. dd if=/tmp/disk.img of=/dev/fd0 bs= 1k Create the checksum for the duplicate disk: md5sum /dev/fd0 > /tmp/duplicate-md5 use cat to verify the accuracy of the duplicate disk by comparing the checksums of all three version # cat /tmp/*md5