- Windows Forensics Cookbook
- Oleg Skulkin Scar de Courcier
- 45字
- 2021-07-02 20:57:45
How it works...
DC3DD creates a bit-by-bit image of the source drive in RAW format, so the size of the image will be the same as the source, and it calculates the image hash using an algorithm of the examiner's choice, in our case SHA-256.