Join Jungwoo Ryoo for an in-depth discussion in this video Remote acquisition with a commercial tool, part of Computer Forensics Essential Training.
…A remote acquisition typically requires a pair of softer programs.…One acting as a server and the other acting as a client.…The server side of the program resides on the suspect machine from which the data…is supposed to be recovered.…And the client side of the program is where the data recovered from…the suspect machine is going to be stored.…We'll start with the suspect machine.…The server program in this case is called HDHOST.…I'm going to be starting the program by right-clicking the icon.…
Select run as the administrator this is critical because this program is…not going to be working if you are not running it as an administrator.…Click on, run as administrator, click on yes now make sure you choose TCPIP.…And then, make a good note of this IP address 192.168.72.133.…Because on the client side,…you'll need this IP address to get connected to the server side here.…
On the suspect side or…the server side, now all you have to do is to click on wait for connection.…Now the suspect machine is ready, now let's switch to the client's side.…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.