Processed through Paypal
No account required.
Donate Bitcoin to this wallet:
Donate Ethereum to this wallet:
Donate Litecoin to this wallet:
|File - Download OSFClone (USB Flash Drive) v1.3.1000|
Always scroll to the bottom of the page to download files on OlderGeeks.com.
We don't believe in fake/misleading download buttons and tricks.
OSFClone (USB Flash Drive) v1.3.1000
OSFClone is a free, self-booting solution which enables you to create or clone exact raw disk images quickly and independent of the installed operating system. In addition to raw disk images, OSFClone also supports imaging drives to the open Advance Forensics Format (AFF), AFF is an open and extensible format to store disk images and associated metadata, and Expert Witness Compression Format (EWF). An open standard enables investigators to quickly and efficiently use their preferred tools for drive analysis. After creating or cloning a disk image, you can mount the image with PassMark OSFMount before conducting analysis with PassMark OSForensics™.
OSFClone creates a forensic image of a disk, preserving any unused sectors, slack space, file fragmentation and undeleted file records from the original hard disk. Boot into OSFClone and create disk clones of FAT, NTFS and USB-connected drives! OSFClone can be booted from CD/DVD drives, or from USB flash drives.
OSFClone can create disk images in the dc3dd format. The dc3dd format is ideal for computer forensics due to its increased level of reporting for progress and errors, and ability to hash files on-the-fly.
Verify that a disk clone is identical to the source drive, by using OSFClone to compare the MD5 or SHA1 hash between the clone and the source drive. After image creation, you can choose from a range of compression options to reduce the size of the newly created image, increasing portability and saving disk space.
Use OSFClone to save forensic meta-data (such as case number, evidence number, examiner name, description and checksum) for cloned or created images.
USB Flash Drives (UFD)
Warning: The process of installing OSFClone to an UFD will overwrite all existing data on the drive.
Back up all existing data on your UFD to your hard disk drive prior to installing OSFClone.
The installation of OSFClone requires an UFD which is at least 2 GB in size.
Download the osfclone.zip file and extract it to a directory of your choosing on your local hard disk drive.
In this example, we extracted the files to a folder in the program files directory at C:\Program Files (x86)\OSFClone.
To reduce the likelihood of mistakes, remove all other USB drives or devices which you may have connected to your system.
Plug the UFD you'd like to use for booting OSFClone into your system and make a note of its drive letter. The UFD must be at least 2 GB in size for installation to be successful.
Start ImageUSB by double-clicking the ImageUSB.exe application.
From the ImageUSB window, first select the drive you would like to use by checking the box next to the appropriate drive letter.
Ensure that the "Write to UFD" radio button is selected in the next section. This option is selected by default in ImageUSB.
In the next section, click on the "Browse" button. Navigate to and open the file named OSFClone.bin.
Finally, click the "Write to UFD" button to install OSFClone to your USB Flash Drive.
Issue: OSFClone may be unable to boot on some UEFI enabled computer systems.
Solution: User may need to go into their BIOS and switch the Boot Mode from Unified Extensible Firmware Interface (UEFI) to Compatibility Support Mode (CSM) on their system.
Issue: OSFClone may not be forensically sound when imaging drives with ext2/3/4 filesystems. During internal testing it was found that if the evidence drive is connected during system start up, it is possible the first superblock (typically offset 1024 within the partition) on the ext2/3/4 filesystem the drive may be altered. Values that were changed include the last mount time, last write time, mount count and a byte at location 0x0178 within the superblock.
Use a write blocker to prevent writes to the evidence drive.
If hot-plugging is supported on the system. Connect the evidence drive to the system after booting into OSFClone.
OSFClone contains the following components:
Perl which is licensed under GPL.
AFF and AFFLIB Copyright (c) 2005, 2006, 2007, 2008 Simson L. Garfinkel and Basis Technology Corp. All rights reserved.
libewf which is licensed under GPL v3.0.
OSFClone software which is licensed under GPL v3.0.
v1.3.1000, 5 Apr 2018
Changed Linux OS to Porteus V4.0 RC4
Fixed bug with Compute Checksum calculation when choosing SHA256 and SHA512 would actually be computing SHA1.
Updated dc3dd to 7.2.646
Updated libewf to 20171104 (included libsmdev-20171112)
Updated afflib to 3.7.16
Updated aimage to 3.2.5
Updated ddrescue to 1.23
HFS+ filesystem supported for read/write.
Support for M.2 NVME drives on Mac
Continue below to download this file.
|297||510||Passmark Software <img src="https://www.oldergeeks.com/downloads/gallery/thumbs/OSFClone1_th.png"border="0">||Nov 07, 2018 - 12:46||1.3.1000||351.93MB||ZIP||, out of 5 Votes.|
|(USB OSFClone Flash Drive) v1.3.1000|
→→ Download Now ←← - Click to Rate File -
Like? Share this page on Twitter → Tweet