Overview
Introduction to Forensic Imaging
Forensic imaging plays a critical role
What is FTK Imager?
Use hardware Blockers
Step-by-step process of creating a forensic image
To reinforce the concepts learned in this module
Identify a hard disk using Windows explorer with a write blocker or UB Write protect
What is FTK Imager
Important
FTK Imager Interface
File Systems and Drive Image Formats
Creating multiple image files
2. Select the source you want to create an image of and click Next.
Select the drive or browse to the source you want to create an image of, then click Finish
4. In the Create Image dialog, click Add.
5. Select the type of image you want to create and click Next.
6. If you selected DD or E01 as the image type, complete the fields in the Evidence Item Information dialog, and click Next.
7. In the Image Destination Folder field, type the location path where you want to save the image file, or click Browse to browse to the desired location.
8. Click Start to begin the imaging process.
FORM Storage Device Copy
Sample copy forms to use
Mode Menu
Select the source you want to preview
FTKImager_UserGuide
"Forensic Imaging Techniques and Tools"
Exploring a variety of imaging tools
Best Practices and Considerations
Advanced Topics in Forensic Imaging
In the this lesson, we'll put theory into practice through hands-on activities.
Wrap Up
Quiz
