INDEX
The letter t following a page number denotes a table; the letter f following a page number denotes a figure.
Numbers
512e sector emulation, 41, 42, 43
A
abstraction layers, disk interfaces, 34, 35f
AccessData. See ftkimager tool; FTK SMART format
Ace Laboratory PC-3000 tool, 122
ACPO (Association of Chief Police Officers), UK, 2, 6–7
acquisition host
attaching subject disk to
Apple Target Disk Mode, 137–138
devices with block or character access, 140
enabling access to hidden sectors, 118–125
examining subject PC hardware, 101–102
identifying subject drive, 105–107
NVME SSDs, 138–139
querying subject disk, 107–118
removable storage media, 132–136
viewing examiner workstation hardware, 103–104
performance, optimizing, ...
Get Practical Forensic Imaging now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
