standalone app for capturing hd and ram image on remote machine

[antmar904]

hi
i have not used osfclone at all and i wanted to know if it is capable of capturing a image of a live machine remotely? I'm looking for a solution to deploy to a remote workstation or server (standalone executable) to capture a live hd and/or ram image. can osfclone do this?

[Richard (PassMark)]

No, not possible with OSFClone to collect images from other systems that are running. OSFClone is a Live Linux Boot image to collect disk images on the system it is running on.

[David (PassMark)]

But you can install OSForensics on the remote machine to do a live disk image and memory image.

[antmar904]

Does anyone know of any standalone executable application that is capable of creating a live image of a remote machine?

[David (PassMark)]

OSForensics can be made into a portal app to run from a USB drive.

But this might be overkill if you just want to copy a drive.
What about the free Disk2vhd tool from Microsoft.
https://docs.microsoft.com/en-us/sys...loads/disk2vhd

Once you have the VHD file, then OSF can open it.