Lab 11:

Using FOG for Cloning and

Imaging Disks I

Because teaching teaches

teachers to teach
 FOG
2

 FOG is a free open-source cloning/imaging

solution/rescue suite.
 FOG can be used to image Windows XP, Vista,
Windows 7 and Window 8 PCs using PXE,
PartClone, and a Web GUI to tie it together. Includes
features like memory and disk test, disk wipe, av
scan & task scheduling.

2
 Install FOG
3

 Install:
 Download the file(s):

wget
http://downloads.sourceforge.net/project/freeghost/FOG/1.
4.0/fog_1.4.0.tar.gz | tar -xzfC fog_1.4.0/
 Go into the downloaded source/bin folder:

cd fog_1.4.0/bin
 Run the Install and follow all prompts accordingly:

sudo ./installfog.sh

3
Enter Dashboard in FOG
4

4
 Using FOG in Malware Analysis
5

 If a computer is badly infected with a virus or

malware, you can boot FOG in AV mode and have it
remove the viruses.
 Set up Lab with physical machines
 Use Deep Freeze (restore), FOG (clone/restore), etc.

5
 Using FOG in Malware Analysis
6

 Create an Image Definition

 Client Preparation: Install Windows XP, Vista, or 7
on your FOG client(s).
 Execute malware or browse malicious websites on
FOG client.
 Deploy your clean image back to the FOG client and
restore it to the original state.