Hello,

Could you please confirm that by creating Multiple Partition - Single Disk image also backup/restore its MBR?

The idea is to ensure that every time I deployed an image (Multiple Partition - Single Disk) i.e. clean image. The reason I am asking for a confirmation is that I noticed from the created images something like “d1.mbr”. I also noticed something like “Restoring MBR” message during the process. Having said that I assume that it does restore the mbr image which I assume is clean and trusted i.e. d1.mbr which was created when I created a Multiple Partition - Single Disk image.

If that is the case then I no longer need to run Fast Wipe + Deploy a image (Single Partition) just ro make sure that the MBR is clean and free from any MBR rootkit/malware.

Thank you very much.

Regards,
Roger

[quote=“roger.franklin, post: 8964, member: 2627”]Hi guys,

I just recently found this amazing tool for imaging solution and I would like to congratulate the developer’s team and the community for bringing this to public for free. It is really awesome tool.

I am actually planning to leverage this tool for my malware analysis setup. I would like to deploy my “clean” image every time I have finished performing malware analysis. Having said that, what I would like to accomplish is to run a fast wipe and immediately deploy my clean image. My wish is to make this two separate tasks at once and if possible automate it so I will always have a clean image - i.e. MBR is also wiped.

Thank you very much in advance.

Kind regards,
Roger[/quote]

I think i’ve got a good start from the wiki [url]http://www.fogproject.org/wiki/index.php/Modifying_the_Init_Image[/url]
My idea is to play with fog.wipe under /tftpboot/fog/images/init.gz. Hopefully I’m in the right direction. Please advice if you have some alternatives.
Thanks again guys.
Regards,
Roger

Hi guys,

I just recently found this amazing tool for imaging solution and I would like to congratulate the developer’s team and the community for bringing this to public for free. It is really awesome tool.

I am actually planning to leverage this tool for my malware analysis setup. I would like to deploy my “clean” image every time I have finished performing malware analysis. Having said that, what I would like to accomplish is to run a fast wipe and immediately deploy my clean image. My wish is to make this two separate tasks at once and if possible automate it so I will always have a clean image - i.e. MBR is also wiped.

Thank you very much in advance.

Kind regards,
Roger