Ghost Solution Suite

 View Only
  • 1.  Ghost 15 - Bit for Bit Forensic Image- is it supported?

    Posted Sep 21, 2010 09:38 PM

    Hello Everyone,

    Does Ghost 15, or any Ghost release for that matter, support a dd type (bit for bit) forensically sound image? If so, would someone point me to the public documentation that states if this is the case, as well as a document that provides instructions on how to perform such actions? 

    Thank You in advance!



  • 2.  RE: Ghost 15 - Bit for Bit Forensic Image- is it supported?

    Posted Sep 22, 2010 03:43 AM

    "Norton Ghost 15" is not genuine Ghost, and does not have this capability (it is a consumer backup product which is sold under the Ghost brand, but isn't derived from the genuine Ghost product).

    Genuine Ghost is still available in Ghost Solution Suite and it has this capability (indeed, it's been used for forensic imaging since about 1997); the option to perform it is documented in the product manual and is requested via the -id command-line switch. Forensic-mode images really are bit-for-bit restored as well, which means that Ghost does not perform the normal adjustments on restore to make the restored disk bootable.