Disk imaging
Knowledge domain: Digital Forensics
The hard disk is one of the common targets during a forensics investigation. This module covers the acquisition and handling of disk images. Besides procedures, we will look at the filesystem and related tools.
Training Guides
- Working with Expert Witness Files [Beginner]