The Ntdd tool is used to duplicate any random file or device in a Windows system. All data read from the source will be hashed with md5 and sha1.
Copyright (C) 2010 Bjorn Brolin, Truesec (www.truesec.com)
USAGE
ntdd SOURCE_FILE_OR_DEVICE DESTINATION_FILE_OR_DEVICE
PARAMETERS
SOURCE_FILE_OR_DEVICE
Specifies the source file or device to duplicate image from
DESTINATION_FILE_OR_DEVICE
Specifies the destination file or device to store the image
EXAMPLE
ntdd \\.\e: file.iso
ntdd \\.\PhysicalDrive0 file.iso (Requires administrator prompt)
