Thank you. Glad you enjoyed the video. There are a couple of other forensic duplicators out there like the Tableau TD4 and Wiebetech Ditto. All nice to have if money is no object 😀
Thank you for the excellent episode! I really appreciate the clear structure of the video-it’s very well done. However, based on my experience, I believe it’s missing a couple of important pieces of input data: - Configuration of your PC with Caine Linux - Entropy level of the data on the source drive Both have a strong influence on the final performance. Also, here’s a little tip for the community: When formatting drives, consider using a larger NTFS or exFAT cluster size. This simple adjustment can noticeably improve the final write speed of DD/E01 image files.
Excellent suggestions on the cluster size, I just did the default values that Windows uses as the starting point. I will add that to the list of possible future videos. Good points about the configuration of the computer and the entropy level of the drive. For this video, I was more focused on the difference between dd/E01 and NTFS/ExFAT so I figure a computer with a reasonable recent processor and enough RAM was sufficient. As for the source drive, I had it probably 80% filled with a mixture of data files (that lend well to compression) and video files (that wont compress).
Yes, the software does make a difference! I have speed tested using the command line (dd/ftkimager*) to create E01s and whatever Guymager is doing is faster than dd/ftkimager. * in case people dont know, Access Data FTK Imager has a linux command line version.
Absolutely. The main reason is the engineers and the amount of work they do on this or that tool. When you make a freeware, there are not so many test cases and performance testing done with various PC configurations, OSs and everything. Typically, a status of free software leads to less accountabiity and that leads to less development effort. So I would predict very different results for such imagers under different conditions. As opposed to that, commercial imagers are faster. Hardware imagers are way faster than anything else due to the fact that vendors have a very specific hardware. So the engineering team can focus on performance with a specific set of hardware and software and deliver the best value. You know, to some extent, it's like a PlayStation 5 which is highly optimized to run all the games.
This is great. I wonder what type of linux architecture the tx1 is using? I know both cain and palading are based on Ununtu which is debian based, perhaps tx1 is arch or something else? In other words, it could be the OS slowing it down.
![BLACK BAG - Official Trailer [HD] - Only in Theaters March 14](http://i.ytimg.com/vi/Du0Xp8WX_7I/mqdefault.jpg)
Had no idea TX1 existed until now, let alone the imaging speeds😂.
Great content, big fun..
Thank you. Glad you enjoyed the video. There are a couple of other forensic duplicators out there like the Tableau TD4 and Wiebetech Ditto. All nice to have if money is no object 😀
@@BlueMonkey4n6 I'll try check them up. Very interesting gadgets/machines.
Thank you for the excellent episode! I really appreciate the clear structure of the video-it’s very well done.
However, based on my experience, I believe it’s missing a couple of important pieces of input data:
- Configuration of your PC with Caine Linux
- Entropy level of the data on the source drive
Both have a strong influence on the final performance.
Also, here’s a little tip for the community:
When formatting drives, consider using a larger NTFS or exFAT cluster size. This simple adjustment can noticeably improve the final write speed of DD/E01 image files.
Excellent suggestions on the cluster size, I just did the default values that Windows uses as the starting point. I will add that to the list of possible future videos.
Good points about the configuration of the computer and the entropy level of the drive. For this video, I was more focused on the difference between dd/E01 and NTFS/ExFAT so I figure a computer with a reasonable recent processor and enough RAM was sufficient. As for the source drive, I had it probably 80% filled with a mixture of data files (that lend well to compression) and video files (that wont compress).
很棒的视频❤
Thank you
I'm wondering also if the imaging software makes a difference in speeds too (ex. Guymager vs. some other imager)
Yes, the software does make a difference! I have speed tested using the command line (dd/ftkimager*) to create E01s and whatever Guymager is doing is faster than dd/ftkimager.
* in case people dont know, Access Data FTK Imager has a linux command line version.
Absolutely. The main reason is the engineers and the amount of work they do on this or that tool. When you make a freeware, there are not so many test cases and performance testing done with various PC configurations, OSs and everything. Typically, a status of free software leads to less accountabiity and that leads to less development effort. So I would predict very different results for such imagers under different conditions.
As opposed to that, commercial imagers are faster. Hardware imagers are way faster than anything else due to the fact that vendors have a very specific hardware. So the engineering team can focus on performance with a specific set of hardware and software and deliver the best value. You know, to some extent, it's like a PlayStation 5 which is highly optimized to run all the games.
Yup, you get what you pay for with Hardware Imaging boxes like the TX1.
This is great. I wonder what type of linux architecture the tx1 is using? I know both cain and palading are based on Ununtu which is debian based, perhaps tx1 is arch or something else? In other words, it could be the OS slowing it down.
I think the Tableau devices are using some flavor of Android from what I recall
I use the Logicube Falcon Neo and I will try to replicate your results and check back.
I am very curious to find how the Neo does, thank you.
❤
thank you!