Seizing and Imaging

 

Lecture Overview

      In this video I discuss how to seize evidence, how to image a drive, and how to verify it using hashing. 

 

Videos:

• Seizing  (notes: seizing.pdf )
• Imaging (notes: imaging.pdf )
• Hashing (notes: hashing.pdf )
• Understanding Forensic Images

 

Advanced Videos:

• Using a physical write blocker

• Using FTK Imager to create images and hashes 

 

Slides 

• Understanding Forensic Images

 

Readings:

• Seizing evidence: Chapter 2
• Imaging: Chapter 4
• Hashing:  pp 126-127, 190