Can Ghost do bit-by-bit imaging as needed in forensic reviews?
search cancel

Can Ghost do bit-by-bit imaging as needed in forensic reviews?

book

Article ID: 250673

calendar_today

Updated On:

Products

Ghost Solution Suite Deployment Solution

Issue/Introduction

How can bit-by-bit imaging be done with Ghost and could this be used for forensic purposes?

Environment

Ghost Solution Suite 3x

Resolution

Ghost has been used for forensic imaging since the late 1990s and the option to perform this is documented in our KB 152308 via the -id command-line switch. Forensic-mode images are bit-for-bit restored as well, which means that Ghost does not perform the normal adjustments on restore to make the restored disk bootable.

Additional Information

Ghost 15 - Bit for Bit Forensic Image- is it supported?

Ghost for Forensic use

152308 Alphabetical list of Ghost switches