### JOHLEM.net ###

--- CHEATSHEET FORENSICS
-------
src: https://www.pearsonitcertification.com/articles/article.aspx?p=27203&seqNum=3

Create the MD5 checksom for the disk 
# md5sum /dev/fd0 > /tmp/original-md5


create an image file of the disk.
# dd if=/dev/fd0 of=/tmp/disk.img bs=1k


se MD5 to verify the accuracy of the image file.


restore the image file to a blank disk.
dd if=/tmp/disk.img of=/dev/fd0 bs= 1k


Create the checksum for the duplicate disk:
md5sum /dev/fd0 > /tmp/duplicate-md5

use cat to verify the accuracy of the duplicate disk by comparing the checksums of all three version
# cat /tmp/*md5