Chapter 6. Computer Forensic Software and Hardware
Topics we'll investigate in this chapter:
▪ Disk Imaging
▪ Forensic Software Tools
▪ Forensic Hardware Tools
Summary
Frequently Asked Questions
Introduction
The quality of work in computer forensics is often based on the tools used during the investigation. To acquire and examine the data on a suspect machine or device, you must use specialized hardware and software. In this way, you can create an image of the data on the machine, allowing you to review the data without modifying it. In doing so, any evidence is protected, and is less likely to be brought into question during a trial.
In this chapter, we discuss disk imaging and introduce hardware- and software-based forensic tools. Due to the large ...
Get Scene of the Cybercrime, 2nd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
