OSFClone

OSFClone is a piece of software designed for advanced users who want to create an exact clone of the raw disk images independently from the primary operating system installed.

The newly created images are available in a DC3DD format, which can be used to perform a detailed forensic on the probable causes of HDD crashes. To be more precise, since the format can provide minute reporting for progress and errors as well as the capacity to hash files while analyzing them at the same time, you can learn a lot of valuable information on your disks.

Key Features:

• Creates exact clone of raw disk images


• Generates images in DC3DD format for detailed forensic analysis


• Works with common volume formats on Windows (NTFS, FAT, USB drives)


• Maintains slack space, file fragmentation, and undeleted file records

Specifications:

• Publisher: PassMark Software


• Price: FREE


• Supported OS: Windows


• File Format: DC3DD

The report generated by OSFClone can be employed to determine whether the disk clone is an exact match of the source drive based on the metadata. The procedure entails comparing the MD5 or SH1 hash between the two sources. Once completed, you can use the tool to save the forensic metadata for the cloned or other created images where you can include evidence number, checksum, case number, examiner name, and more.

It is worth mentioning that the application works with the common volume formats on Windows, namely NTFS, FAT as well as other USB-connected drives. Lastly, when creating clone images, OSFClone keeps the slack space, file fragmentation, undeleted file records as well as other unused records from the original hard disks from the original HDD.

For more information and to download OSFClone, visit PassMark Software.