In this video we will use FTK Imager to create a physical disk image of a suspect drive connected to our forensic workstation via a write blocker. FTK Imager is a GUI tool for copying various types of data for forensic acquisition purposes.
🚀 Full Digital Forensic Courses → learn.dfir.sci...
010001000100011001010011011000110110100101100101011011100110001101100101
Get more Digital Forensic Science
👍 Subscribe → bit.ly/2Ij9Ojc
❤️ YT Member → bit.ly/DFIRSci...
❤️ Patreon → / dfirscience
🕸️ Blog → DFIR.Science
🤖 Code → github.com/DFI...
🐦 Follow → / dfirscience
📰 DFIR Newsletter → bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101
Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.
Негізгі бет Forensic Acquisition in Windows - FTK Imager
Пікірлер: 57