Bit Stream Forensic Cloning nvme SSD's using software

[terminator2]

Day by Day SATA interface is getting been phased out & NVME has became mainstream standard now
Many times like Bitlocker recovery cloning of crashed media becomes a must.
I would like to know how to technically clone nvme ssd's (using softwares ) from following options --

1) Dedicated hardware cloner -- pro but expensive
2) Using Desktop NVME slots for source / target
3) Using type C / USB casing for both source & target
4) Source in desktop & target in USB -- Don't know any advantage except source & target will not get accidentally altered in case same models
How you guys clone these SSD's ?

[Lukas]

PC3000 Portable III, DeepSpare USB Stabilizer / Guardonix, DFL, and a standard USB adapter.
Software - any program capable of making a binary copy.
It all depends on your needs.

[terminator2]

PC3000 Portable III, DeepSpare USB Stabilizer / Guardonix, DFL, and a standard USB adapter.
Software - any program capable of making a binary copy.
It all depends on your needs.

Actually I will be using software only , I want to know which option is technically best for max. accuracy.

[Arch Stanton]

First you give 4 options, totally vague because you know the answer, then you get an answer with hardware suggestions and then it needs to be software only that is "technically best" for "max accuracy". There's tons of tools that will make a bit by bit copy, the tools are not the problem if the image gets "contaminated", it's the fact that anything can access the source drive and alter it if you don't use hardware write blocking or some hardware dedicated cloner. Now this will be specially true from a Windows perspective, even if tools lock the source drive, they will only do so once you selected the drive as source.

Either go Linux + OpenSuperCLone for example, or pay $320 to get a Guardonix if you prefer using Windows software, combined with DMDE Pro you'd be set for life.

[terminator2]

First you give 4 options, totally vague because you know the answer, then you get an answer with hardware suggestions and then it needs to be software only that is "technically best" for "max accuracy". There's tons of tools that will make a bit by bit copy, the tools are not the problem if the image gets "contaminated", it's the fact that anything can access the source drive and alter it if you don't use hardware write blocking or some hardware dedicated cloner. Now this will be specially true from a Windows perspective, even if tools lock the source drive, they will only do so once you selected the drive as source.

Either go Linux + OpenSuperCLone for example, or pay $320 to get a Guardonix if you prefer using Windows software, combined with DMDE Pro you'd be set for life.

Hi
I think my point for posting has been misunderstood.
As I have mentioned this imaging or cloning is only for internal data recovery purpose or in compliance with forensic guidelines. If I have cloned copies I can work on decryption using multiple techniques.
I have hardware imager for IDE /SATA which I still use for onsite cloning of automation devices
My concern was out of different interfaces of connecting nvme drives to pc , which is the best.
I mean is it better to have both SSD's connected through USB casings or through desktop motherboards.
I have read somewhere in forum that connecting nvme ssd through USB casing is better & was interested to know opinion of you guys how you clone ssd's for internal DR purpose.
Thanks for replying.
I am already using both DMDE pro & opensuperclone

[Arch Stanton]

IMO forensic guidelines and Windows contradicts unless you use a hardware write blocker.

In general I'd say that connecting through native interface is best, every layer (NVMe > USB for example) is a potential source of noise / complications.
That said, I personally "covert" for example NVMe to USB because it allows me to hook it up to my 5G USB Stabilizer. If I had the 10G I'd use the NVMe port.

Anyway, if there's a restriction or preference to use Windows as an OS I'd at least get a Guardonix unit.

[terminator2]

IMO forensic guidelines and Windows contradicts unless you use a hardware write blocker.

In general I'd say that connecting through native interface is best, every layer (NVMe > USB for example) is a potential source of noise / complications.
That said, I personally "covert" for example NVMe to USB because it allows me to hook it up to my 5G USB Stabilizer. If I had the 10G I'd use the NVMe port.

Anyway, if there's a restriction or preference to use Windows as an OS I'd at least get a Guardonix unit.

Thanks Arch
I got my answer I will buy a good quality gigabyte workstation motherboard for cloning purpose. So far I was using nvme USB casings for both source & target.
Thanks