Email
Like
Liked ×
Save
Private Content
Embed
Loading embed code…
We have emailed the verification/download link to "".
Login to your email and click the link to download the file directly.

To request the link at a different email address, update it here. Close
Validation messages. Success message. Fail message.

Check your bulk/spam folders if you can't find our mail.
Loading

+ Follow

Computer Image acquisition

by n|u - The Open Security Community on Mar 16, 2012

890 views

Banglore null Monthly Meet - March 2012

Banglore null Monthly Meet - March 2012

Accessibility

View text version

Categories

Upload Details

Uploaded via SlideShare as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

File a copyright complaint

1 Embed 378

http://null.co.in

378

Statistics

Likes: 0
Downloads: 6
Comments: 0
Embed Views: 378
Views on SlideShare: 512
Total Views: 890

Computer Image acquisition Presentation Transcript

IMAGE ACQUISITION - Nithin
Forensic Process• Acquisition or Imaging• Analysis• Reporting
Forensic Process• Acquisition or Imaging – Sector level duplication – Hashing• Analysis• Reporting
Disk Imaging• Sector by sector copying• Archive files – Meta data, – File directory structure• File Formats – Information to 0’s and 1’s
• Write blocker – Native – Tailgate• Cluster – A single sector, on a standard hard drive is 512 bytes – Group of sectors is clusters – In a Windows pc a cluster has 8 sectors (4kB) – 1 cluster is the smallest file size that a drive can handle
Live Working on FTK imager
Thank you 