[Pauldotcom] foremost and data forensics

[Matt Erasmus]

Not too sure about the LVM volumes as it's been a while since I've
played with them, but
I've always used good old dd and netcat to make live copies of servers...

This was one of the more useful posts I found:

http://digiassn.blogspot.com/2006/01/dd-over-netcat-for-cheap-ghost.html

2010/1/19 Monkey Daemon <monkeywebdaemon at googlemail.com>:
> So can I image the partition in "realtime" or do I need to take the
> server off-line and boot from a live cd


-- 
Matt Erasmus

/* @z0nbi / http://www.zonbi.org */