![]() ![]() We are able to create a 100% identical copy of the evidence. And in digital forensics, we are able to something special. When you want to investigate a system you need to document everything you can about the system. The gold rule of forensic also applies to digital forensics. “Never touch, change, or alter anything until it has been documented, identified, measured, and photographed.” I would highly recommend hiring an expert to perform any kind of forensic data acquisition. While it is possible to create a forensic image yourself. But I believe this subject deserves a more comprehensive explanation. A simple answer would be that a forensic image contains all data stored on a device. A question I get asked a lot is “what is a forensic image?” and what is the difference between an image made with tools like FTK Imager and Acronis true Image.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |