Tuesday, 1 February 2011

Creating a disk image using a write blocker and 'dd'

I do not have FTK imager at home but I can borrow a write blocker to aid me in imaging the hard drive. I have an installation of Linux (Ubuntu 10.04) with 'dd' installed and a Tableau t3u write blocker. Acqusition steps:

  1. Remove hard drive from the Xbox 360 hard drive unit (see removal steps).
  2. Connect the hard drive to the write blocker.
  3. Open up the terminal in Ubuntu.
  4. Next you must identify where the hard drive is located, I located the hard drive under /dev directory as sdc.
  5. Next calculate the md5 of the hard disk:
    1. md5sum /dev/sdc > XboxDiskName.md5
  6. Next the drive is imaged, this was done by typing the following:
    1. sudo dd if=/dev/sdc of=/media/externalHDD/XboxImageName.dd
  7. To check is the image created is the same the hard disk the MD5 is calculated:
    1. md5sum XboxImageName.dd > XboxImageName.md5
  8. The md5's can be compared to see if they are identical.
Once these steps have been completed an image should be created of the Xbox disk that is a duplicate of the data stored on the actual hard drive.

No comments:

Post a Comment