O'Reilly logo

Computer Evidence: Collection and Preservation, Second Edition by Christopher L. T. Brown

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Portable Field Workstations

Despite the computer forensics workstation shown in Figure 15.2 being a bit larger than the average workstation, it’s safe to say that forensics workstations from the lab are rarely portable. At first glance, forensics investigators may feel that they can handle imaging workstations on-site using a boot CD-ROM or handheld forensics imager and leave all workstations back at the lab. Although this statement is partially true, there are many benefits to bringing one or more forensics workstations on-site. One of the first benefits is the ability to use an imaging and analysis suite such as ProDiscover, EnCase, or FTK throughout the case. Having analysis software on-site also allows investigators to perform an on-site ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required