Join Jungwoo Ryoo for an in-depth discussion in this video Static acquisition with a commercial tool, part of Learning Computer Forensics.
…In addition to the open source imaging utilities there are also…some commercial imaging tools.…Although some of these tools are commercial they are freely available.…One of the such tools is this tool called FTK imager.…Here, I'll demonstrate how to use FTK Imager to create an image.…First, let's start FTK Imager by right-clicking on the icon and…Run FTK Imager as Administrator and then go under File.…
Choose Create This Image, and then choose Physical Drive.…So, as you already know, Logical Drives refer to partitions, Physical Drives…are the physical drives attached to your machine like the USB drive.…So, we'll be choosing Physical Drive for our option, click on Next.…I already have a USB drive plugged into my machine.…So I'm going to be choosing the USB drive,…and then all you have to do is simply clicking on finish.…
Now you have to say where the file,…the image file is going to be saved, click on Add.…You have to decide, in this case we'll be choosing the raw file format which is DD.…This gives you an exact copy of your physical drive,…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 43s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.