DataDump ™ is a free tool which allows you to dump segments of data, or all of the data, from an original source image or physical/logical device. It can be used for the following:
- Extract a stream of binary data from a source image or physical/logical device
- Convert an entire image or a segment of an image to a single flat file
- Extract binary chunks of data from files, images or physical/logical devices
- Extract a partition from a source device as a single binary file
- Hash the output data using MD5, SHA-1, SHA-256 or SHA-512
It is particularly useful when debugging and testing when you may wish to extract a small subset of data from the original source. All you have to do is select a source, select the start and end offsets, or start offset and length; then select a file to save the data to. During the extraction, the hex viewer display will change to show the data that is being dumped. Selecting an offset will also show the data located at that sector.
Dumping an SD Card
A common data recovery use case may be to capture all of the data from a removable device like an SD Card. This is easily achieved with DataDump ™.
- Run DataDump ™ and click on the Select Source button.
- Select 'Physical or Logical Device' to launch the selection window:
3. Select the Drive Number which relates to your physical device. In our case above, the device we are interested in is Drive Number 8.
4. Click OK.
5. DO NOT change the Start or End LBA values. We automatically set the Start and End values to recover the full device.
6. Click 'Output File' and select the destination file for your image.
Make sure you select an Output File on a device which is NOT the source. Also, ensure that the destination location has enough space to receive the data from your source.