Which of the following tools works by using standard set of MS-DOS commands and can create an MD5 hash of an entire drive, partition, or selected files?

The correct answer is C. DriveSpy. DriveSpy is a command-line digital forensic tool that operates using standard MS-DOS commands. It is capable of imaging and hashing storage media - including entire drives, individual partitions, or selected files - using MD5 hashing to verify forensic integrity. Device Seizure i

Security Operations Management

Question

Options

ADevice Seizure
BOntrack
CDriveSpy
DForensic Sorter

How the community answered

(38 responses)

A
5% (2)
B
3% (1)
C
89% (34)
D
3% (1)

Explanation

DriveSpy is a command-line digital forensic tool that operates using standard MS-DOS commands. It is capable of imaging and hashing storage media - including entire drives, individual partitions, or selected files - using MD5 hashing to verify forensic integrity. Device Seizure is a GUI-based mobile/PDA forensic tool by Paraben. Ontrack is primarily a data recovery product. Forensic Sorter is used to categorize and sort forensic evidence, not to hash drives via MS-DOS commands.

Topics

#Forensic Tools#Digital Forensics#Hashing#Disk Imaging

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSMP Practice