Glossary: Logs and Data Sources for Investigations

dd

A Linux command that copies a device bit for bit. Alex used it to image Casey's USB drive, with if= for the input device, of= for the output file, and conv=noerror,sync to keep going past unreadable blocks.