{"id":963,"date":"2018-09-06T16:39:58","date_gmt":"2018-09-06T16:39:58","guid":{"rendered":"http:\/\/mchmelar.cz\/?p=963"},"modified":"2024-12-02T23:20:33","modified_gmt":"2024-12-02T23:20:33","slug":"file-forencisc-of-usb","status":"publish","type":"post","link":"https:\/\/kb.mchmelar.cz\/?p=963","title":{"rendered":"File forencisc of USB"},"content":{"rendered":"\n<p>make image out of USB stick:<br>\ndd if=\/dev\/hda (DEVICE) of=mybigfile.img bs=(disc cache size, eg 8M) conv=noerror,sync status=progress<br>\nu can recognize it with <em>dmesg<\/em><br>\nusually \/dev\/sdb1, NOT \/media\/user\/usb&#8230;<br>\nAutopsy: choose volume drive if needed<br>\nExoprt&nbsp;file -&gt; will be exported to downloads folder<br>\n&nbsp;<br>\n&nbsp;<br>\nfree hexa editor pro anal\u00fdzu a cracking bin\u00e1rn\u00edch soubor\u016f, um\u00ed definovat gramatiku. Pro Windows a Linux<br>\n<a href=\"https:\/\/hexinator.com\/\" target=\"_blank\" rel=\"noopener nofollow\" data-ft=\"{&quot;tn&quot;:&quot;-U&quot;}\" data-lynx-mode=\"async\" data-lynx-uri=\"https:\/\/l.facebook.com\/l.php?u=https%3A%2F%2Fhexinator.com%2F&amp;h=AT0Y9vowqkN2FfD9af-Wg3EMk2VhJoNBgk49Lt6J59yumXon4oyQTzhhwjk7JEqNAcJ8DY72OFiDSVQwVBI4ncY8SGj0Yj2_G0DnOw70jJKMZuwlR4vqMu7LE9J9TCXBumRbymRrrjcTRNLsBkxNOR4GZdRNp3Sh4oxrZs6oTLAsz4lopIRr4ChPZGrMeWyoOC3_NMabfLF6m_Rqx-OD_fIa1oxsWOV06q8mWKGI1IhoDjn-wq7dZ6j2DGZnwE6_t0l7K-dFpqkc4W8rNsepbah60MxaPpPccEdyHVmsal4lZS0A0sQj4ATm9PZnEKl8UTVKl8K8_KKTLEzvXSqZjQ0hVpI3Xyg-_n3Emhz5grJ1fB5YmdK0Hd-oEAoxmi7V7oOa6-pv7YOdOvxLbkFNR8dafInWNuL9eBh4XzL5n3vDCbiBJNVxtReGU45_lrRe-Dbaq9sNfAJvVaFcktpDepylsxizZ6NJVg\">https:\/\/hexinator.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>make image out of USB stick: dd if=\/dev\/hda (DEVICE) of=mybigfile.img bs=(disc cache size, eg 8M) conv=noerror,sync status=progress u can recognize it with dmesg usually \/dev\/sdb1, NOT \/media\/user\/usb&#8230; Autopsy: choose volume drive if needed Exoprt&nbsp;file -&gt; will be exported to downloads folder &nbsp; &nbsp; free hexa editor pro anal\u00fdzu a cracking bin\u00e1rn\u00edch soubor\u016f, um\u00ed definovat gramatiku. Pro Windows a Linux https:\/\/hexinator.com<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,20],"tags":[55],"_links":{"self":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/963"}],"collection":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=963"}],"version-history":[{"count":1,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/963\/revisions"}],"predecessor-version":[{"id":5804,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=\/wp\/v2\/posts\/963\/revisions\/5804"}],"wp:attachment":[{"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=963"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=963"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.mchmelar.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=963"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}