And if they're overwritten by some destructive part of the recovery process, it doesn't matter - you can return to the original image and start again. If, say, the hard drive you've imaged contains some really important files that you've accidentally deleted, then this would mean that you could work at recovering them on a second system.
This may allow you to analyse the image with other computer forensic tools.Īnd if you have no other tools, then you can use PassMark's OSFMount to mount the image on another PC.
Whatever unused sectors, slack space, file fragmentation or undeleted file records are on the original disk, will be faithfully reproduced on the image.Īs well as creating raw images, OSFClone is also able to save drive images in other common formats, including dc3dd and AFF.
The program doesn't take any shortcuts, by for example only copying used sectors, so you can be sure that the final image will be an exact copy of your drive. OSFClone is a free bootable tool that allows you to create an image of a hard drive.
