all right, Welcome to advanced ever Met Tree forensic acquisition. We'll talk about allocated nonlinear, partial and live images today.
All right, so in summary, today's video our course we learned howto make an ever men tree allocated on Lee forensic image where we just collected the actual operating system and files on the system and not that blank space we learned howto
Macon ever met tree nonlinear, partial forensic image. Or, as I like to call it, a file type image. We also learned howto
edit our file type choices there so we could make our own custom, uh, file type queries. We looked at how to make a elementary live friend disk image of a Windows target system. We also, you know, talked the way through the, you know, how would be slightly different on a on A Mac or or Lennix system.
And then we looked at it. Ah, you know the downloadable, um,
push and pull pulling push. If you prefer elementary live agents, how you might get those onto various computers and collect across the network
in a network environment where that's a more convenient situation
and, ah, before a run and move on to the next course. As always, feel free to email me if you have questions or didn't quite understand something and, you know, get your friends stuff together and come run with us.